From 602f5a2c2a7ed23ebd61a728f6e16f63024e3c1f Mon Sep 17 00:00:00 2001

From: Michael Scherer <misc@zarb.org>

Date: Thu, 6 Feb 2014 10:05:17 +0100

Subject: [PATCH] exec: Ignore the setting SELinuxContext if selinux is not

 enabled

(cherry picked from commit 5c56a259e07661a66e806cc2fbc71de96a75f78e)

Related: #1113790

---

 src/core/execute.c | 2 +-

 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/core/execute.c b/src/core/execute.c

index cf9d24e..cb6f146 100644

--- a/src/core/execute.c

+++ b/src/core/execute.c

@@ -1472,7 +1472,7 @@ int exec_spawn(ExecCommand *command,

                                 }

                         }

 #ifdef HAVE_SELINUX

-                        if (context->selinux_context) {

+                        if (context->selinux_context && use_selinux()) {

                                 err = security_check_context(context->selinux_context);

                                 if (err < 0) {

                                         r = EXIT_SELINUX_CONTEXT;