38a12ac
diff -up shadow-4.6/lib/selinux.c.getenforce shadow-4.6/lib/selinux.c
38a12ac
--- shadow-4.6/lib/selinux.c.getenforce	2018-05-28 15:10:15.870315221 +0200
38a12ac
+++ shadow-4.6/lib/selinux.c	2018-05-28 15:10:15.894315731 +0200
38a12ac
@@ -75,7 +75,7 @@ int set_selinux_file_context (const char
38a12ac
 	}
38a12ac
 	return 0;
38a12ac
     error:
38a12ac
-	if (security_getenforce () != 0) {
38a12ac
+	if (security_getenforce () > 0) {
38a12ac
 		return 1;
38a12ac
 	}
38a12ac
 	return 0;
38a12ac
@@ -95,7 +95,7 @@ int reset_selinux_file_context (void)
38a12ac
 		selinux_checked = true;
38a12ac
 	}
38a12ac
 	if (selinux_enabled) {
38a12ac
-		if (setfscreatecon (NULL) != 0) {
38a12ac
+		if (setfscreatecon (NULL) != 0 && security_getenforce () > 0) {
38a12ac
 			return 1;
38a12ac
 		}
38a12ac
 	}