From 537bfce2bda471c92caabd388589230200891509 Mon Sep 17 00:00:00 2001 From: Michael Biebl Date: Fri, 3 Jul 2026 19:53:18 +0200 Subject: New upstream version 1.58~rc1 --- src/n-acd/src/n-acd.c | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) (limited to 'src/n-acd') diff --git a/src/n-acd/src/n-acd.c b/src/n-acd/src/n-acd.c index 9bc32244..402f00c2 100644 --- a/src/n-acd/src/n-acd.c +++ b/src/n-acd/src/n-acd.c @@ -366,14 +366,17 @@ _c_public_ int n_acd_new(NAcd **acdp, NAcdConfig *config) { acd->max_bpf_map = 8; - /* Let's try to create a BPF map. If we fail, we want to ignore it - * only if we lack permissions to create it, and proceed without eBPF. */ + /* Let's try to create a BPF map. If we fail, we want to ignore it and + * proceed without eBPF when we lack permissions to create it (-EPERM) + * or the bpf() syscall is unavailable (-ENOSYS), e.g. blocked by a + * seccomp policy or missing from the kernel. Other errors signal a real + * bpf problem and stay fatal. */ r = n_acd_bpf_map_create(&acd->fd_bpf_map, acd->max_bpf_map); if (r == 0) { r = n_acd_bpf_compile(&fd_bpf_prog, acd->fd_bpf_map, (struct ether_addr*) acd->mac); if (r) return r; - } else if (r != -EPERM) { + } else if (r != -EPERM && r != -ENOSYS) { return r; } -- cgit 1.3.0-6-gf8a5