From 5c56a259e07661a66e806cc2fbc71de96a75f78e Mon Sep 17 00:00:00 2001 From: Michael Scherer Date: Thu, 6 Feb 2014 10:05:17 +0100 Subject: exec: Ignore the setting SELinuxContext if selinux is not enabled --- src/core/execute.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/core/execute.c') diff --git a/src/core/execute.c b/src/core/execute.c index c02c768c68..474a4af895 100644 --- a/src/core/execute.c +++ b/src/core/execute.c @@ -1569,7 +1569,7 @@ int exec_spawn(ExecCommand *command, } } #ifdef HAVE_SELINUX - if (context->selinux_context) { + if (context->selinux_context && use_selinux()) { err = security_check_context(context->selinux_context); if (err < 0) { r = EXIT_SELINUX_CONTEXT; -- cgit v1.2.3-54-g00ecf