From: Daniel Golle <daniel@makrotopia.org>
Date: Mon, 4 Jan 2021 21:52:33 +0000 (+0000)
Subject: jail: only output BPF instr. table header if debugging
X-Git-Url: http://git.openwrt.org/?a=commitdiff_plain;h=0a74c067f9d1d17a82ac10ff2f86596a887a41aa;p=project%2Fprocd.git

jail: only output BPF instr. table header if debugging

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
---

diff --git a/jail/seccomp-oci.c b/jail/seccomp-oci.c
index e85191e..f089ac6 100644
--- a/jail/seccomp-oci.c
+++ b/jail/seccomp-oci.c
@@ -407,14 +407,15 @@ struct sock_fprog *parseOCIlinuxseccomp(struct blob_attr *msg)
 	prog->filter = filter;
 
 	DEBUG("generated seccomp-bpf program:\n");
-	fprintf(stderr, " [idx]\tcode\t jt\t jf\tk\n");
-	if (debug)
+	if (debug) {
+		fprintf(stderr, " [idx]\tcode\t jt\t jf\tk\n");
 		for (idx=0; idx<sz; idx++)
 			fprintf(stderr, " [%03d]\t%04hx\t%3hhu\t%3hhu\t%08x\n", idx,
 				filter[idx].code,
 				filter[idx].jt,
 				filter[idx].jf,
 				filter[idx].k);
+	}
 
 	return prog;