From: Lennart Poettering <lennart@poettering.net>
Date: Sun, 22 Apr 2012 11:39:18 +0000 (+0200)
Subject: units: don't try to load kernel modules if CAP_SYS_MODULE is missing
X-Git-Tag: v183~217
X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=commitdiff_plain;h=5cd6eef69b926175b889799d80bd9deb33a904d1

units: don't try to load kernel modules if CAP_SYS_MODULE is missing
---

diff --git a/units/systemd-modules-load.service.in b/units/systemd-modules-load.service.in
index 72e1d70dc..243afadc8 100644
--- a/units/systemd-modules-load.service.in
+++ b/units/systemd-modules-load.service.in
@@ -11,6 +11,7 @@ DefaultDependencies=no
 Conflicts=shutdown.target
 After=systemd-readahead-collect.service systemd-readahead-replay.service
 Before=sysinit.target shutdown.target
+ConditionCapability=CAP_SYS_MODULE
 ConditionDirectoryNotEmpty=|/lib/modules-load.d
 ConditionDirectoryNotEmpty=|/usr/lib/modules-load.d
 ConditionDirectoryNotEmpty=|/usr/local/lib/modules-load.d