From 497aeabd2309d8696c131d482b87444acee601d7 Mon Sep 17 00:00:00 2001
From: Shea Levy <shea@shealevy.com>
Date: Thu, 21 Feb 2013 14:22:18 -0500
Subject: [PATCH] systemd automatically mounts securityfs (if it's enabled)

---
 modules/system/boot/stage-1-init.sh | 1 -
 modules/system/boot/stage-1.nix     | 1 -
 2 files changed, 2 deletions(-)

diff --git a/modules/system/boot/stage-1-init.sh b/modules/system/boot/stage-1-init.sh
index 3f34a1ae6a5..cac7a1ceaa9 100644
--- a/modules/system/boot/stage-1-init.sh
+++ b/modules/system/boot/stage-1-init.sh
@@ -65,7 +65,6 @@ mount -t sysfs none /sys
 mount -t devtmpfs -o "size=@devSize@" none /dev
 mkdir -p /run
 mount -t tmpfs -o "mode=0755,size=@runSize@" none /run
-mount -t securityfs none /sys/kernel/security
 
 # Process the kernel command line.
 export stage2Init=/init
diff --git a/modules/system/boot/stage-1.nix b/modules/system/boot/stage-1.nix
index 92386440dd8..f78a5dda2d3 100644
--- a/modules/system/boot/stage-1.nix
+++ b/modules/system/boot/stage-1.nix
@@ -361,6 +361,5 @@ in {
   system.requiredKernelConfig = with config.lib.kernelConfig; [
     (isYes "TMPFS")
     (isYes "BLK_DEV_INITRD")
-    (isYes "SECURITYFS")
   ];
 }