X-Git-Url: http://git.ipfire.org/?a=blobdiff_plain;f=src%2Fcore%2Fcgroup.c;h=0c885d57440f414ede597d78bf846fa7c8384b2f;hb=4b381a9ef65d68dc79760b093436a9c81f43fa5d;hp=042a742fa9b4b7132545adc2858a200da90e3a61;hpb=d631a760e09b7e6eb9d47ce933635771c736ac6f;p=thirdparty%2Fsystemd.git

diff --git a/src/core/cgroup.c b/src/core/cgroup.c
index 042a742fa9b..0c885d57440 100644
--- a/src/core/cgroup.c
+++ b/src/core/cgroup.c
@@ -1378,6 +1378,8 @@ static CGroupMask unit_get_cgroup_mask(Unit *u) {
 
         c = unit_get_cgroup_context(u);
 
+        assert(c);
+
         /* Figure out which controllers we need, based on the cgroup context object */
 
         if (c->cpu_accounting)
@@ -1540,6 +1542,10 @@ CGroupMask unit_get_target_mask(Unit *u) {
          * hierarchy that shall be enabled for it. */
 
         mask = unit_get_own_mask(u) | unit_get_members_mask(u) | unit_get_siblings_mask(u);
+
+        if (mask & CGROUP_MASK_BPF_FIREWALL & ~u->manager->cgroup_supported)
+                emit_bpf_firewall_warning(u);
+
         mask &= u->manager->cgroup_supported;
         mask &= ~unit_get_ancestor_disable_mask(u);