From: Lennart Poettering <lennart@poettering.net>
Date: Wed, 20 May 2015 15:40:05 +0000 (+0200)
Subject: units: conditionalize audit multicast socket on CAP_AUDIT_READ
X-Git-Tag: v220~26
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=01906c76c1a6eafc0dccf83b672ff1f3ed3e3338;p=thirdparty%2Fsystemd.git

units: conditionalize audit multicast socket on CAP_AUDIT_READ

The multicast logic can only work if the capability is available, hence
require it.
---

diff --git a/units/systemd-journald-audit.socket b/units/systemd-journald-audit.socket
index 35397aaeb89..541f2cf38d3 100644
--- a/units/systemd-journald-audit.socket
+++ b/units/systemd-journald-audit.socket
@@ -11,6 +11,7 @@ Documentation=man:systemd-journald.service(8) man:journald.conf(5)
 DefaultDependencies=no
 Before=sockets.target
 ConditionSecurity=audit
+ConditionCapability=CAP_AUDIT_READ
 
 [Socket]
 Service=systemd-journald.service