fa229d0928
We really don't want these in containers as they provide a too lowlevel look on the system. Conditionalize them with CAP_SYS_RAWIO since that's required to access /proc/kcore, /dev/kmem and similar, which feel similar in style. Also, npsawn containers lack that capability.
22 lines
719 B
SYSTEMD
22 lines
719 B
SYSTEMD
# This file is part of systemd.
|
|
#
|
|
# systemd is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU Lesser General Public License as published by
|
|
# the Free Software Foundation; either version 2.1 of the License, or
|
|
# (at your option) any later version.
|
|
|
|
[Unit]
|
|
Description=Configuration File System
|
|
Documentation=https://www.kernel.org/doc/Documentation/filesystems/configfs/configfs.txt
|
|
Documentation=http://www.freedesktop.org/wiki/Software/systemd/APIFileSystems
|
|
DefaultDependencies=no
|
|
ConditionPathExists=/sys/kernel/config
|
|
ConditionCapability=CAP_SYS_RAWIO
|
|
After=systemd-modules-load.service
|
|
Before=sysinit.target
|
|
|
|
[Mount]
|
|
What=configfs
|
|
Where=/sys/kernel/config
|
|
Type=configfs
|