From 1f3ba2bb4f65b56ee77b098d8ab34766db55cf0a Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Wed, 10 Dec 2014 22:10:46 +0100
Subject: [PATCH 1/1] build-sys: turn off SMACK capabilities stuff for now,
 since it is incompatible with nspawn

---
 units/user@.service.m4.in | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/units/user@.service.m4.in b/units/user@.service.m4.in
index 340c02b59..0daa43aeb 100644
--- a/units/user@.service.m4.in
+++ b/units/user@.service.m4.in
@@ -17,7 +17,7 @@ ExecStart=-@rootlibexecdir@/systemd --user
 Slice=user-%i.slice
 KillMode=mixed
 Delegate=yes
-m4_ifdef(`HAVE_SMACK',
-Capabilities=cap_mac_admin=i
-SecureBits=keep-caps
-)
+#m4_ifdef(`HAVE_SMACK',
+#Capabilities=cap_mac_admin=i
+#SecureBits=keep-caps
+#)
-- 
2.30.2