[systemd-devel] [PATCH] build-sys: remove commented-out m4 from user at .service

Lennart Poettering mztabzr at 0pointer.de
Mon Dec 15 07:36:51 PST 2014

On Sun, 14.12.14 19:12, Mantas Mikul─Śnas (grawity at gmail.com) wrote:

> Otherwise this actually remains in the generated unit in /usr/lib.
> If you want to keep it commented out, a m4-compatible way would be:
>     m4_ifdef(`HAVE_SMACK',
>     dnl Capabilities=cap_mac_admin=i
>     dnl SecureBits=keep-caps
>     )

This really was only a temporary commenting, since the bits broke the
user instance in containers. See


We really should find a proper fix for this, instead of just removing
the code for it.


Lennart Poettering, Red Hat

More information about the systemd-devel mailing list