socket: try creating a socket under our own identity if we have no perms to consult...

diff --git a/src/socket.c b/src/socket.c
index a8f8dc3a5e834a98fdc88f972775c52b21abf772..01af34c1052585736dcd89406bdb874f2663c077 100644 (file)
--- a/src/socket.c
+++ b/src/socket.c
@@ -774,8 +774,10 @@ static int socket_open_fds(Socket *s) {
                                         return r;
 
                                 if (s->service && s->service->exec_command[SERVICE_EXEC_START])
-                                        if ((r = label_get_socket_label_from_exe(s->service->exec_command[SERVICE_EXEC_START]->path, &label)) < 0)
-                                                return r;
+                                        if ((r = label_get_socket_label_from_exe(s->service->exec_command[SERVICE_EXEC_START]->path, &label)) < 0) {
+                                                if (r != -EPERM)
+                                                        return r;
+                                        }
 
                                 know_label = true;
                         }