socket: introduce SELinuxLabelViaNet option

This makes possible to spawn service instances triggered by socket with
MLS/MCS SELinux labels which are created based on information provided by
connected peer.

Implementation of label_get_child_label derived from xinetd.

Reviewed-by: Paul Moore <pmoore@redhat.com>

1 files changed, 1 insertions, 0 deletions

diff --git a/src/core/execute.h b/src/core/execute.h
index 9d05d3a9de..d23a98097a 100644
--- a/src/core/execute.h
+++ b/src/core/execute.h
@@ -136,6 +136,7 @@ struct ExecContext {
 
         bool selinux_context_ignore;
         char *selinux_context;
+        bool selinux_label_via_net;
 
         bool apparmor_profile_ignore;
         char *apparmor_profile;