[systemd-commits] units/systemd-journald-audit.socket

[Lennart Poettering]

 units/systemd-journald-audit.socket |    1 +
 1 file changed, 1 insertion(+)

New commits:
commit 01906c76c1a6eafc0dccf83b672ff1f3ed3e3338
Author: Lennart Poettering <lennart at poettering.net>
Date:   Wed May 20 17:40:05 2015 +0200

    units: conditionalize audit multicast socket on CAP_AUDIT_READ
    
    The multicast logic can only work if the capability is available, hence
    require it.

diff --git a/units/systemd-journald-audit.socket b/units/systemd-journald-audit.socket
index 35397aa..541f2cf 100644
--- a/units/systemd-journald-audit.socket
+++ b/units/systemd-journald-audit.socket
@@ -11,6 +11,7 @@ Documentation=man:systemd-journald.service(8) man:journald.conf(5)
 DefaultDependencies=no
 Before=sockets.target
 ConditionSecurity=audit
+ConditionCapability=CAP_AUDIT_READ
 
 [Socket]
 Service=systemd-journald.service