From: Christian Göttsche <cgzones@googlemail.com>
Date: Wed, 27 Oct 2021 17:47:49 +0000 (+0200)
Subject: core: correct SELinux label of service credential directory
X-Git-Tag: v250-rc1~392
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e3a0a862f625fdabfb0cbe15917a343c9d542d03;p=thirdparty%2Fsystemd.git

core: correct SELinux label of service credential directory

Label the service root credential directory so write_credential() will
create entries with the label of their parent directory.

Resolves: #21134
---

diff --git a/src/core/execute.c b/src/core/execute.c
index 9d100889018..0c1e2e0563b 100644
--- a/src/core/execute.c
+++ b/src/core/execute.c
@@ -2819,6 +2819,8 @@ static int setup_credentials_internal(
         assert(!must_mount || workspace_mounted > 0);
         where = workspace_mounted ? workspace : final;
 
+        (void) label_fix_container(where, final, 0);
+
         r = acquire_credentials(context, params, unit, where, uid, workspace_mounted);
         if (r < 0)
                 return r;