diff --git a/srcpkgs/systemd/INSTALL b/srcpkgs/systemd/INSTALL
index cb82399e8d..70f56697e5 100644
--- a/srcpkgs/systemd/INSTALL
+++ b/srcpkgs/systemd/INSTALL
@@ -1,8 +1,13 @@
 case "${ACTION}" in
 post)
+	setcap cap_dac_override,cap_sys_ptrace+ep usr/bin/systemd-detect-virt || :
+
 	if [ -c dev/urandom -a ! -f etc/machine-id ]; then
 		systemd-machine-id-setup
-		systemctl enable getty@.service || true
+		systemctl enable getty@.service || :
+	fi
+	if [ "$UPDATE" = "yes" -a -e sys/fs/cgroup/systemd ]; then
+		systemctl --system daemon-reexec || :
 	fi
 	;;
 esac
diff --git a/srcpkgs/systemd/template b/srcpkgs/systemd/template
index 2b1d5e4c4a..e80860eeca 100644
--- a/srcpkgs/systemd/template
+++ b/srcpkgs/systemd/template
@@ -1,14 +1,14 @@
 # Template file for 'systemd'
 pkgname=systemd
 version=195
-revision=3
+revision=4
 build_style=gnu-configure
 configure_args="--with-distro=other --libexecdir=/usr/lib
  --disable-selinux --disable-tcpwrap --with-rootprefix=/usr
  --with-sysvinit-path= --with-sysvrcd-path= --disable-audit
  --with-usb-ids-path=/usr/share/hwdata/usb.ids
  --with-pci-ids-path=/usr/share/hwdata/pci.ids --disable-static"
-depends="dbus run-parts kbd>=1.15.3_5 polkit"
+depends="dbus run-parts kbd>=1.15.3_5 polkit libcap-progs"
 makedepends="pkg-config intltool gperf libxslt docbook-xsl acl-devel pam-devel
  dbus-devel libcap-devel libkmod-devel liblzma-devel cryptsetup-devel
  libblkid-devel glib-devel libgcrypt-devel python-devel qrencode-devel