selinux.c:reset_selinux_file_context(): do not fail in permissive mode

Return 0 on setfscreatecon(3) failure, like set_selinux_file_context().

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Acked-by: James Carter <jwcart2@gmail.com>

diff --git a/lib/selinux.c b/lib/selinux.c
index e31a5f92da188d2e1fe6e8aa7cabdfb35a52057d..a2ea91c8a77efb0079bebdcfa5082db7ff94ea90 100644 (file)
--- a/lib/selinux.c
+++ b/lib/selinux.c
@@ -94,7 +94,7 @@ int reset_selinux_file_context (void)
        }
        if (selinux_enabled) {
                if (setfscreatecon_raw (NULL) != 0) {
-                       return 1;
+                       return security_getenforce () != 0;
                }
        }
        return 0;