fixup: mls in accordance to process runner

Signed-off-by: Dmitry Sharshakov <[email protected]>
siderolabs · Oct 28, 2024 · 0455963 · 0455963
1 parent 2aa612e
commit 0455963
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/app/machined/pkg/system/runner/process/process.go b/internal/app/machined/pkg/system/runner/process/process.go
@@ -171,7 +171,7 @@ func beforeExecCallback(pa *syscall.ProcAttr, data any) error {
 				log.Fatalf("%s", err)
 			}
 		} else {
-			err := os.WriteFile("/proc/thread-self/attr/exec", []byte("system_u:system_r:unconfined_service_t"), 0o777)
+			err := os.WriteFile("/proc/thread-self/attr/exec", []byte("system_u:system_r:unconfined_service_t:s0"), 0o777)
 			if err != nil {
 				log.Fatalf("%s", err)
 			}