[systemd-devel] [PATCH] Drop ConditionCapability=CAP_MKNOD from *udev* units

Kay Sievers kay at vrfy.org
Thu Jul 25 14:56:31 PDT 2013


On Thu, Jul 25, 2013 at 7:00 PM, Lennart Poettering
<lennart at poettering.net> wrote:

> I'd vote by replacing it by
> ConditionPathIsReadWrite=/sys since sane container managers mount that
> read-only.)

A change like that sounds great to me. Keying-off access to /sys is
probably more appropriate for today's udev than the ability creating
device nodes.

Kay


More information about the systemd-devel mailing list