Only execute chcon if selinux is enabled and use full context

refs #8332 fixes #10773
Icinga · Dec 4, 2015 · 0c8395f · 0c8395f
1 parent e6453f4
commit 0c8395f
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/etc/initsystem/safe-reload b/etc/initsystem/safe-reload
@@ -11,8 +11,10 @@ fi
 printf "Validating config files: "
 
 OUTPUTFILE=`mktemp`
-if [ $(which chcon) ]; then
-        chcon -t icinga2_tmp_t $OUTPUTFILE
+if type selinuxenabled > /dev/null 2> /dev/null; then
+        if selinuxenabled; then
+       	        chcon -u system_u -r object_r -t icinga2_tmp_t $OUTPUTFILE
+        fi
 fi