From 2d30397ad166156da3599297697889ec7229e402 Mon Sep 17 00:00:00 2001
From: Oyvind Albrigtsen <oalbrigt@redhat.com>
Date: Tue, 18 Nov 2025 12:03:50 +0100
Subject: [PATCH] nginx: restore SELinux context for pid-file during
 validate-all

---
 heartbeat/nginx | 1 +
 1 file changed, 1 insertion(+)

diff --git a/heartbeat/nginx b/heartbeat/nginx
index 0f856175d..a963ca093 100755
--- a/heartbeat/nginx
+++ b/heartbeat/nginx
@@ -850,6 +850,7 @@ validate_all_nginx() {
     ocf_run $NGINXD $OPTIONS -q -t -c $CONFIGFILE
   then
     : Cool $NGINXD likes $CONFIGFILE
+    which restorecon > /dev/null 2>&1 && selinuxenabled && restorecon "$PidFile"
   else
     ocf_exit_reason "$NGINXD $OPTIONS -q -t -c $CONFIGFILE reported a configuration error."
     return $OCF_ERR_CONFIGURED