summaryrefslogtreecommitdiffstats
path: root/src/core/execute.c
diff options
context:
space:
mode:
authorChristian Göttsche <cgzones@googlemail.com>2021-10-27 19:47:49 +0200
committerYu Watanabe <watanabe.yu+github@gmail.com>2021-10-28 13:55:37 +0200
commite3a0a862f625fdabfb0cbe15917a343c9d542d03 (patch)
tree1be34723cd2b94da91ba9ba612cebbc8cc3ed8df /src/core/execute.c
parentintegritysetup: Check args to prevent assert (diff)
downloadsystemd-e3a0a862f625fdabfb0cbe15917a343c9d542d03.tar.xz
systemd-e3a0a862f625fdabfb0cbe15917a343c9d542d03.zip
core: correct SELinux label of service credential directory
Label the service root credential directory so write_credential() will create entries with the label of their parent directory. Resolves: #21134
Diffstat (limited to '')
-rw-r--r--src/core/execute.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/core/execute.c b/src/core/execute.c
index 9d10088901..0c1e2e0563 100644
--- a/src/core/execute.c
+++ b/src/core/execute.c
@@ -2819,6 +2819,8 @@ static int setup_credentials_internal(
assert(!must_mount || workspace_mounted > 0);
where = workspace_mounted ? workspace : final;
+ (void) label_fix_container(where, final, 0);
+
r = acquire_credentials(context, params, unit, where, uid, workspace_mounted);
if (r < 0)
return r;