units: conditionalize audit multicast socket on CAP_AUDIT_READ

[thirdparty/systemd.git] / units / systemd-journald-audit.socket

diff --git a/units/systemd-journald-audit.socket b/units/systemd-journald-audit.socket
index 35397aaeb89a387f0560eca42a5e7307f62322c8..541f2cf38d374b16a232fd88b039ad9401924f90 100644 (file)
--- a/units/systemd-journald-audit.socket
+++ b/units/systemd-journald-audit.socket
@@ -11,6 +11,7 @@ Documentation=man:systemd-journald.service(8) man:journald.conf(5)
 DefaultDependencies=no
 Before=sockets.target
 ConditionSecurity=audit
+ConditionCapability=CAP_AUDIT_READ
 
 [Socket]
 Service=systemd-journald.service