summaryrefslogtreecommitdiff
path: root/units/systemd-tmpfiles-setup-dev.service.in
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2014-07-04 03:07:20 +0200
committerLennart Poettering <lennart@poettering.net>2014-07-04 03:24:41 +0200
commite0c74691c41a204eba2fd5f39615049fc9ff1648 (patch)
tree6e9c501d889d0a92c50179afa29513f1a9a92f72 /units/systemd-tmpfiles-setup-dev.service.in
parent54f601debc07addbed803fb847cd5bd3e91e021e (diff)
units: conditionalize static device node logic on CAP_SYS_MODULES instead of CAP_MKNOD
npsawn containers generally have CAP_MKNOD, since this is required to make PrviateDevices= work. Thus, it's not useful anymore to conditionalize the kmod static device node units. Use CAP_SYS_MODULES instead which is not available for nspawn containers. However, the static device node logic is only done for being able to autoload modules with it, and if we can't do that there's no point in doing it.
Diffstat (limited to 'units/systemd-tmpfiles-setup-dev.service.in')
-rw-r--r--units/systemd-tmpfiles-setup-dev.service.in2
1 files changed, 1 insertions, 1 deletions
diff --git a/units/systemd-tmpfiles-setup-dev.service.in b/units/systemd-tmpfiles-setup-dev.service.in
index b9cfc53bd1..06346d3b7c 100644
--- a/units/systemd-tmpfiles-setup-dev.service.in
+++ b/units/systemd-tmpfiles-setup-dev.service.in
@@ -12,7 +12,7 @@ DefaultDependencies=no
Conflicts=shutdown.target
After=systemd-readahead-collect.service systemd-readahead-replay.service systemd-sysusers.service
Before=sysinit.target local-fs-pre.target systemd-udevd.service shutdown.target
-ConditionCapability=CAP_MKNOD
+ConditionCapability=CAP_SYS_MODULE
[Service]
Type=oneshot