c3b013 seccomp: reduce logging about failure to add syscall to seccomp

5 files Authored by Zbigniew Jędrzejewski-Szmek 4 years ago, Committed by Packit Service 4 years ago,
    seccomp: reduce logging about failure to add syscall to seccomp
    
    Our logs are full of:
    Sep 19 09:22:10 autopkgtest systemd[690]: Failed to add rule for system call oldstat() / -10037, ignoring: Numerical argument out of domain
    Sep 19 09:22:10 autopkgtest systemd[690]: Failed to add rule for system call get_thread_area() / -10076, ignoring: Numerical argument out of domain
    Sep 19 09:22:10 autopkgtest systemd[690]: Failed to add rule for system call set_thread_area() / -10079, ignoring: Numerical argument out of domain
    Sep 19 09:22:10 autopkgtest systemd[690]: Failed to add rule for system call oldfstat() / -10034, ignoring: Numerical argument out of domain
    Sep 19 09:22:10 autopkgtest systemd[690]: Failed to add rule for system call oldolduname() / -10036, ignoring: Numerical argument out of domain
    Sep 19 09:22:10 autopkgtest systemd[690]: Failed to add rule for system call oldlstat() / -10035, ignoring: Numerical argument out of domain
    Sep 19 09:22:10 autopkgtest systemd[690]: Failed to add rule for system call waitpid() / -10073, ignoring: Numerical argument out of domain
    ...
    This is pointless and makes debug logs hard to read. Let's keep the logs
    in test code, but disable it in nspawn and pid1. This is done through a function
    parameter because those functions operate recursively and it's not possible to
    make the caller to log meaningfully.
    
    There should be no functional change, except the skipped debug logs.
    
    (cherry-picked from commit b54f36c604472ffe08830ec4306fa2885b4a5424)
    
    Resolves: #1658691
    
    patch_name: 0124-seccomp-reduce-logging-about-failure-to-add-syscall-.patch
    present_in_specfile: true
    location_in_specfile: 124
    squash_commits: true
    
        
file modified
+3 -3
file modified
+2 -2
file modified
+31 -26
file modified
+3 -3
file modified
+8 -8