From: Dimitri John Ledkov <xnox@ubuntu.com>
Date: Wed, 2 Aug 2017 08:15:26 +0000 (+0100)
Subject: units: set ConditionVirtualization=!private-users on journald audit socket (#6508)
X-Git-Tag: v235~276
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=d2a1ba103b4ea22764953d795c36db3d492d50c9;p=thirdparty%2Fsystemd.git

units: set ConditionVirtualization=!private-users on journald audit socket (#6508)

It fails to start in an unprivileged container as audit is not namespace aware.
---

diff --git a/units/systemd-journald-audit.socket b/units/systemd-journald-audit.socket
index 541f2cf38d3..6ee86214c48 100644
--- a/units/systemd-journald-audit.socket
+++ b/units/systemd-journald-audit.socket
@@ -12,6 +12,7 @@ DefaultDependencies=no
 Before=sockets.target
 ConditionSecurity=audit
 ConditionCapability=CAP_AUDIT_READ
+ConditionVirtualization=!private-users
 
 [Socket]
 Service=systemd-journald.service