ip vrf: Improve bpf error messages

Next up a non-root user gets various bpf related error messages:

$ ip vrf exec mgmt bash
Failed to load BPF prog: 'Operation not permitted'
Kernel compiled with CGROUP_BPF enabled?

Catch the EPERM error and do not show the kernel config option.

Signed-off-by: David Ahern <dsa@cumulusnetworks.com>

diff --git a/ip/ipvrf.c b/ip/ipvrf.c
index dc8364a43a57d51d6d9a6f88fb8c65964f50e98d..8bd99d6251f26b3cbdb0b33fb64301dc9b4b7ac6 100644 (file)
--- a/ip/ipvrf.c
+++ b/ip/ipvrf.c
@@ -181,7 +181,11 @@ static int vrf_configure_cgroup(const char *path, int ifindex)
        if (prog_fd < 0) {
                fprintf(stderr, "Failed to load BPF prog: '%s'\n",
                        strerror(errno));
-               fprintf(stderr, "Kernel compiled with CGROUP_BPF enabled?\n");
+
+               if (errno != EPERM) {
+                       fprintf(stderr,
+                               "Kernel compiled with CGROUP_BPF enabled?\n");
+               }
                goto out;
        }