core: ignore failure on setting smack process label when allowed

diff --git a/src/core/execute.c b/src/core/execute.c
index 52a4daf0cb6d60e8aad85a30b781cb1ffa133d8a..bf4a66e3bd55f1ab3dc8d1b6f57381208667c1db 100644 (file)
--- a/src/core/execute.c
+++ b/src/core/execute.c
@@ -4613,7 +4613,7 @@ static int exec_child(
                  * process. This is the latest place before dropping capabilities. Other MAC context are set later. */
                 if (use_smack) {
                         r = setup_smack(context, executable_fd);
-                        if (r < 0) {
+                        if (r < 0 && !context->smack_process_label_ignore) {
                                 *exit_status = EXIT_SMACK_PROCESS_LABEL;
                                 return log_unit_error_errno(unit, r, "Failed to set SMACK process label: %m");
                         }