Don't show a warning message in non-enforcing mode.

If we fail to load the SELinux policy only log an error message in
enforcing mode.

1 files changed, 3 insertions, 2 deletions

diff --git a/src/selinux-setup.c b/src/selinux-setup.c
index 620c49e686..bc36e765e1 100644
--- a/src/selinux-setup.c
+++ b/src/selinux-setup.c
@@ -72,12 +72,13 @@ int selinux_setup(char *const argv[]) {
                return -errno;
 
        } else {
-               log_full(enforce > 0 ? LOG_ERR : LOG_WARNING, "Failed to load SELinux policy.");
 
                unlink("/dev/.systemd-relabel-run-dev");
 
-               if (enforce > 0)
+               if (enforce > 0) {
+                       log_full(LOG_ERR, "Failed to load SELinux policy.");
                        return -EIO;
+               }
        }
 #endif