From bddfc8afd329ac68a23f66a3512d4e249af25191 Mon Sep 17 00:00:00 2001 From: Tom Gundersen Date: Mon, 2 Jun 2014 21:50:50 +0200 Subject: networkd: drop CAP_SYS_MODULE Rely on modules being built-in or autoloaded on-demand. As networkd is a network facing service, we want to limits its capabilities, as much as possible. Also, we may not have CAP_SYS_MODULE in a container, and we want networkd to work the same there. Module autoloading does not always work, but should be fixed by the kernel patch f98f89a0104454f35a: 'net: tunnels - enable module autoloading', which is currently in net-next and which people may consider backporting if they want tunneling support without compiling in the modules. Early adopters may also use a module-load.d snippet and order systemd-modules-load.service before networkd to force the module loading of tunneling modules. This sholud fix the various build issues people have reported. --- src/network/networkd.h | 1 - 1 file changed, 1 deletion(-) (limited to 'src/network/networkd.h') diff --git a/src/network/networkd.h b/src/network/networkd.h index 82d8d706b5..6f77c7785f 100644 --- a/src/network/networkd.h +++ b/src/network/networkd.h @@ -275,7 +275,6 @@ struct Manager { LIST_HEAD(Network, networks); usec_t network_dirs_ts_usec; - struct kmod_ctx *kmod_ctx; }; extern const char* const network_dirs[]; -- cgit v1.2.3-54-g00ecf