+
+ if (context->selinux_label_via_net && use_selinux()) {
+ _cleanup_free_ char *label = NULL;
+
+ err = label_get_child_label(socket_fd, command->path, &label);
+ if (err < 0) {
+ r = EXIT_SELINUX_CONTEXT;
+ goto fail_child;
+ }
+
+ err = setexeccon(label);
+ if (err < 0) {
+ r = EXIT_SELINUX_CONTEXT;
+ goto fail_child;
+ }
+ }