diff --git a/man/systemd.exec.xml b/man/systemd.exec.xml index f6a9e0cdab..a78187e0eb 100644 --- a/man/systemd.exec.xml +++ b/man/systemd.exec.xml @@ -2559,8 +2559,12 @@ RestrictNamespaces=~cgroup net PrivateBPF= Takes a boolean argument. If set, mount a private instance of the BPF filesystem - on /sys/fs/bpf/. Otherwise, if ProtectKernelTunables= is set, - the instance from the host is inherited but mounted read-only. Defaults to false. + on /sys/fs/bpf/, effectively hiding the host bpffs which contains informations + about loaded programs and maps. Otherwise, if ProtectKernelTunables= is set, the + instance from the host is inherited but mounted read-only. + + This can be used together with the BPF delegate feature to choose what BPF functions are + available to the unit's processes. Defaults to false. diff --git a/src/basic/generate-bpf-delegate-configs.py b/src/basic/generate-bpf-delegate-configs.py index a358a69e76..200c913b8a 100755 --- a/src/basic/generate-bpf-delegate-configs.py +++ b/src/basic/generate-bpf-delegate-configs.py @@ -56,7 +56,7 @@ with open(header) as file: if output == 'code': print(f'\t"{enumValue}",') else: - print(f'{enumValue}') + print(f'{enumValue}') if output == 'code': print('};') else: