exec: Add support for ignoring errors on SELinuxContext by prefixing it with -, like for others settings.

Also remove call to security_check_context, as this doesn't serve anything, since setexeccon will fail anyway.
2014-02-10 13:18:16 +01:00
parent 5c56a259e0
commit 0d3f7bb3a5
2 changed files with 16 additions and 8 deletions
@@ -956,7 +956,9 @@
                                <listitem><para>Set the SELinux context of the
                                executed process. If set, this will override the
                                automated domain transition. However, the policy
-                                still need to autorize the transition. See
+                                still need to autorize the transition. This directive
+                                is ignored if SELinux is disabled. If prefixed by <literal>-</literal>,
+                                all errors will be ignored. See
                                <citerefentry><refentrytitle>setexeccon</refentrytitle><manvolnum>3</manvolnum></citerefentry>
                                for details.</para></listitem>
                        </varlistentry>