Don't show a warning message in non-enforcing mode.

If we fail to load the SELinux policy only log an error message in
enforcing mode.

diff --git a/src/selinux-setup.c b/src/selinux-setup.c
index 9ff27dcd77f03f0a1b7ab016d60deb3121b3e252..b6181fb445fbae06848b76417f55bc5065197491 100644 (file)
--- a/src/selinux-setup.c
+++ b/src/selinux-setup.c
@@ -59,12 +59,13 @@ int selinux_setup(char *const argv[]) {
                return -errno;
 
        } else {
-               log_full(enforce > 0 ? LOG_ERR : LOG_WARNING, "Failed to load SELinux policy.");
 
                unlink("/dev/.systemd-relabel-run-dev");
 
-               if (enforce > 0)
+               if (enforce > 0) {
+                       log_full(LOG_ERR, "Failed to load SELinux policy.");
                        return -EIO;
+               }
        }
 #endif