From 0c8395fe1f42ddef4229f49bd45f9672ae2f9600 Mon Sep 17 00:00:00 2001
From: Dirk Goetz <dirk.goetz@netways.de>
Date: Fri, 4 Dec 2015 15:28:16 +0100
Subject: [PATCH] Only execute chcon if selinux is enabled and use full context

refs #8332
fixes #10773
---
 etc/initsystem/safe-reload | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/etc/initsystem/safe-reload b/etc/initsystem/safe-reload
index f49f29f6bc2..f196a83c6a5 100644
--- a/etc/initsystem/safe-reload
+++ b/etc/initsystem/safe-reload
@@ -11,8 +11,10 @@ fi
 printf "Validating config files: "
 
 OUTPUTFILE=`mktemp`
-if [ $(which chcon) ]; then
-        chcon -t icinga2_tmp_t $OUTPUTFILE
+if type selinuxenabled > /dev/null 2> /dev/null; then
+        if selinuxenabled; then
+       	        chcon -u system_u -r object_r -t icinga2_tmp_t $OUTPUTFILE
+        fi
 fi