On 5/4/21 7:43 PM, Daniel P. Berrangé wrote: > Signed-off-by: Daniel P. Berrangé <berrange@xxxxxxxxxx> > --- > src/util/viridentity.c | 4 ++++ > 1 file changed, 4 insertions(+) > > diff --git a/src/util/viridentity.c b/src/util/viridentity.c > index 065db06e49..83044a3de1 100644 > --- a/src/util/viridentity.c > +++ b/src/util/viridentity.c > @@ -268,6 +268,7 @@ virIdentity *virIdentityGetSystem(void) > #if WITH_SELINUX > char *con; > #endif > + g_autofree char *token = virIdentityEnsureSystemToken(); It should be a hard error if EnsureSystemToken() fails. > > if (!(ret = virIdentityNew())) > return NULL; > @@ -310,6 +311,9 @@ virIdentity *virIdentityGetSystem(void) > } > #endif > > + if (virIdentitySetSystemToken(ret, token) < 0) > + return NULL; > + > return g_steal_pointer(&ret); > } > > Michal