]> git.ipfire.org Git - thirdparty/systemd.git/commitdiff
pid1: lower log level if BPF LSM is not available
authorLennart Poettering <lennart@poettering.net>
Fri, 7 Mar 2025 09:37:54 +0000 (10:37 +0100)
committerLuca Boccassi <luca.boccassi@gmail.com>
Fri, 7 Mar 2025 13:25:04 +0000 (13:25 +0000)
Currently, if you boot PID 1 in a container you always see a complaint
that BPF LSM won't work. That's fine, and log worthy, but probably not
above debug level. After all this is a really common case, and we should
gracefully adopt to our execution environment.

src/core/bpf-restrict-fs.c

index c6c6dffed4e05a3623b951291644b13f8d08aa70..3f2ea2b9e6ce8597ee9b868bb842237ca73af0d0 100644 (file)
@@ -107,7 +107,7 @@ bool bpf_restrict_fs_supported(bool initialize) {
 
         r = lsm_supported("bpf");
         if (r == -ENOPKG) {
-                log_info_errno(r, "bpf-restrict-fs: securityfs not mounted, BPF LSM support not available.");
+                log_debug_errno(r, "bpf-restrict-fs: securityfs not mounted, BPF LSM support not available.");
                 return (supported = false);
         }
         if (r < 0) {