Permit scriptlet exec context setting to fail in non-enforcing modes

- This is what rpm_execcon() in libselinux always did, and trying to
  be more strict causes things to blow up on install to an empty
  chroot where /proc and /sys/fs/selinux are not mounted.

1 files changed, 4 insertions, 0 deletions

diff --git a/plugins/selinux.c b/plugins/selinux.c
index 0a3ef6f13..736514b60 100644
--- a/plugins/selinux.c
+++ b/plugins/selinux.c
@@ -133,6 +133,10 @@ exit:
     freecon(fcon);
     freecon(mycon);
 
+    /* If selinux is not enforcing, we don't care either */
+    if (rc && security_getenforce() < 1)
+	rc = RPMRC_OK;
+
     return rc;
 }