seccomp: silence 'unknown syscall' warnings

Output them as debugging messages instead.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

diff --git a/jail/seccomp-oci.c b/jail/seccomp-oci.c
index 88f80536dbf3d57eaf50ac4de8cced739453008e..c80c6be739710bb34a420133728ab11c45fb89a9 100644 (file)
--- a/jail/seccomp-oci.c
+++ b/jail/seccomp-oci.c
@@ -227,7 +227,7 @@ struct sock_fprog *parseOCIlinuxseccomp(struct blob_attr *msg)
                blobmsg_for_each_attr(curn, tbn[OCI_LINUX_SECCOMP_SYSCALLS_NAMES], remn) {
                        sc = find_syscall(blobmsg_get_string(curn));
                        if (sc == -1) {
-                               ERROR("unknown syscall '%s'\n", blobmsg_get_string(curn));
+                               DEBUG("unknown syscall '%s'\n", blobmsg_get_string(curn));
                                /* TODO: support run.oci.seccomp_fail_unknown_syscall=1 annotation */
                                continue;
                        }