From: Łukasz Stelmach <l.stelmach@samsung.com>
Date: Wed, 23 Oct 2024 10:58:36 +0000 (+0200)
Subject: core: don't forget about fallback_smack_process_label
X-Git-Tag: v257-rc1~155
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=20bbf5ee4c6c80599a91e7a4b7474e931a27db4a;p=thirdparty%2Fsystemd.git

core: don't forget about fallback_smack_process_label

Call setup_smack() also when only fallback_smack_process_label is set.

Fixes: 75689fb2d41f
---

diff --git a/src/core/exec-invoke.c b/src/core/exec-invoke.c
index d5bd43bcd78..cdfa9f823b1 100644
--- a/src/core/exec-invoke.c
+++ b/src/core/exec-invoke.c
@@ -4995,7 +4995,7 @@ int exec_invoke(
 #if ENABLE_SMACK
                 /* LSM Smack needs the capability CAP_MAC_ADMIN to change the current execution security context of the
                  * process. This is the latest place before dropping capabilities. Other MAC context are set later. */
-                if (use_smack && context->smack_process_label) {
+                if (use_smack) {
                         r = setup_smack(params, context, executable_fd);
                         if (r < 0 && !context->smack_process_label_ignore) {
                                 *exit_status = EXIT_SMACK_PROCESS_LABEL;