From: Christian Göttsche <cgzones@googlemail.com>
Date: Fri, 9 Apr 2021 16:20:53 +0000 (+0200)
Subject: selinux.c:reset_selinux_file_context(): do not fail in permissive mode
X-Git-Tag: v4.9~26^2~3
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e367d111e513a61495213028e8d4ab2e36775790;p=thirdparty%2Fshadow.git

selinux.c:reset_selinux_file_context(): do not fail in permissive mode

Return 0 on setfscreatecon(3) failure, like set_selinux_file_context().

Signed-off-by: Christian Göttsche <cgzones@googlemail.com>
Acked-by: James Carter <jwcart2@gmail.com>
---

diff --git a/lib/selinux.c b/lib/selinux.c
index e31a5f92d..a2ea91c8a 100644
--- a/lib/selinux.c
+++ b/lib/selinux.c
@@ -94,7 +94,7 @@ int reset_selinux_file_context (void)
 	}
 	if (selinux_enabled) {
 		if (setfscreatecon_raw (NULL) != 0) {
-			return 1;
+			return security_getenforce () != 0;
 		}
 	}
 	return 0;