On Sun, 14.12.14 19:12, Mantas Mikulėnas ([email protected]) wrote: > Otherwise this actually remains in the generated unit in /usr/lib. > > If you want to keep it commented out, a m4-compatible way would be: > > m4_ifdef(`HAVE_SMACK', > dnl Capabilities=cap_mac_admin=i > dnl SecureBits=keep-caps > )
This really was only a temporary commenting, since the bits broke the user instance in containers. See http://lists.freedesktop.org/archives/systemd-devel/2014-December/026188.html We really should find a proper fix for this, instead of just removing the code for it. Lennart -- Lennart Poettering, Red Hat _______________________________________________ systemd-devel mailing list [email protected] http://lists.freedesktop.org/mailman/listinfo/systemd-devel
