diff --git a/src/core/execute.c b/src/core/execute.c index d5882999f6..52a4daf0cb 100644 --- a/src/core/execute.c +++ b/src/core/execute.c @@ -4566,7 +4566,7 @@ static int exec_child( if (fd >= 0) { r = mac_selinux_get_child_mls_label(fd, executable, context->selinux_context, &mac_selinux_context_net); - if (r < 0) { + if (r < 0 && !context->selinux_context_ignore) { *exit_status = EXIT_SELINUX_CONTEXT; return log_unit_error_errno(unit, r, "Failed to determine SELinux context: %m"); } @@ -4700,7 +4700,7 @@ static int exec_child( if (exec_context) { r = setexeccon(exec_context); - if (r < 0) { + if (r < 0 && !context->selinux_context_ignore) { *exit_status = EXIT_SELINUX_CONTEXT; return log_unit_error_errno(unit, r, "Failed to change SELinux context to %s: %m", exec_context); }