Only execute chcon if selinux is enabled and use full context

fixes #10773

diff --git a/etc/initsystem/safe-reload b/etc/initsystem/safe-reload
index faac2dbc7a4e33ca76d213f295b87c32295ae3df..afacc9e456ef91a4111ef0467f118fbd7c9149f0 100644 (file)
--- a/etc/initsystem/safe-reload
+++ b/etc/initsystem/safe-reload
@@ -12,8 +12,10 @@ printf "Validating config files: "
 
 OUTPUTFILE=`mktemp`
 
-if type chcon >/dev/null 2>&1; then
-       chcon -t icinga2_tmp_t $OUTPUTFILE
+if type selinuxenabled >/dev/null 2>&1; then
+       if selinuxenabled; then
+               chcon -t icinga2_tmp_t $OUTPUTFILE
+       fi
 fi
 
 if ! $DAEMON daemon --validate --color > $OUTPUTFILE; then