Gentoo Archives: gentoo-user

From: Nikos Chantziaras <realnc@×××××.com>
To: gentoo-user@l.g.o
Subject: [gentoo-user] Re: systemd: "local system does not support BPF/cgroup based firewalling"
Date: Sat, 28 Oct 2017 18:45:23
Message-Id: ot2j6m$64g$1@blaine.gmane.org
In Reply to: Re: [gentoo-user] systemd: "local system does not support BPF/cgroup based firewalling" by "Canek Peláez Valdés"
1 There is no such kernel option.
2
3
4 On 28/10/17 21:21, Canek Peláez Valdés wrote:
5 > Do you have CONFIG_CGROUP_BPF enabled?
6 >
7 > Regards.
8 >
9 > On Sat, Oct 28, 2017 at 1:03 PM, Nikos Chantziaras <realnc@×××××.com
10 > <mailto:realnc@×××××.com>> wrote:
11 >
12 > I'm getting these at startup:
13 >
14 > systemd[1]: File /lib/systemd/system/systemd-journald.service:33
15 > configures an IP firewall (IPAddressDeny=any), but the local system
16 > does not support BPF/cgroup based firewalling.
17 > systemd[1]: Proceeding WITHOUT firewalling in effect!
18 > systemd[1]: File /lib/systemd/system/systemd-udevd.service:32
19 > configures an IP firewall (IPAddressDeny=any), but the local system
20 > does not support BPF/cgroup based firewalling.
21 > systemd[1]: Proceeding WITHOUT firewalling in effect!
22 > systemd[1]: File /lib/systemd/system/systemd-logind.service:34
23 > configures an IP firewall (IPAddressDeny=any), but the local system
24 > does not support BPF/cgroup based firewalling.
25 > systemd[1]: Proceeding WITHOUT firewalling in effect!
26 >
27 > What do I need to make this work? I found this:
28 >
29 > https://github.com/systemd/systemd/issues/7188
30 > <https://github.com/systemd/systemd/issues/7188>
31 >
32 > But CONFIG_BPF_SYSCALL is enabled and I still get that message.
33 >
34 > This is on kernel 4.9.59 with systemd 235.

Replies

Subject Author
Re: [gentoo-user] Re: systemd: "local system does not support BPF/cgroup based firewalling" "Canek Peláez Valdés" <caneko@×××××.com>