units: don't try to load kernel modules if CAP_SYS_MODULE is missing

diff --git a/units/systemd-modules-load.service.in b/units/systemd-modules-load.service.in
index 72e1d70dce6f896aa99aac11b1360fc3de221bf0..243afadc83ec2461d49360b597c69eb825032c1d 100644 (file)
--- a/units/systemd-modules-load.service.in
+++ b/units/systemd-modules-load.service.in
@@ -11,6 +11,7 @@ DefaultDependencies=no
 Conflicts=shutdown.target
 After=systemd-readahead-collect.service systemd-readahead-replay.service
 Before=sysinit.target shutdown.target
+ConditionCapability=CAP_SYS_MODULE
 ConditionDirectoryNotEmpty=|/lib/modules-load.d
 ConditionDirectoryNotEmpty=|/usr/lib/modules-load.d
 ConditionDirectoryNotEmpty=|/usr/local/lib/modules-load.d