- <term><varname>SELinuxLabelViaNet=</varname></term>
- <listitem><para>Takes a boolean
- value. Controls whether systemd attempts to figure out
- SELinux label used for instantiated service from
- information handed by peer over the
- network. Configuration option has effect only
- on sockets with <literal>Accept=</literal>
- mode set to <literal>yes</literal>.</para></listitem>
+ <term><varname>SELinuxContextFromNet=</varname></term>
+ <listitem><para>Takes a boolean
+ argument. When true systemd will attempt
+ to figure out the SELinux label used
+ for the instantiated service from the
+ information handed by the peer over the
+ network. Note that only the security
+ level is used from the information
+ provided by the peer. Other parts of
+ the resulting SELinux context originate
+ from either the target binary that is
+ effectively triggered by socket unit
+ are taken from the value of the
+ <varname>SELinuxContext=</varname>
+ option.This configuration option only
+ affects sockets with
+ <varname>Accept=</varname> mode set to
+ <literal>true</literal>. Also note that
+ this option is useful only when
+ MLS/MCS SELinux policy is
+ deployed. Defaults to
+ <literal>false</literal>.
+ </para></listitem>