From f2c27d8104e3971780e371428186cb08d044d2e4 Mon Sep 17 00:00:00 2001
From: Gabriel Brascher <gabriel@apache.org>
Date: Fri, 28 May 2021 16:40:27 -0300
Subject: [PATCH] fix issue "Network with SG Disabled still has security group
 script adding rules on KVM"

---
 .../src/main/java/com/cloud/vm/VirtualMachineManagerImpl.java  | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/engine/orchestration/src/main/java/com/cloud/vm/VirtualMachineManagerImpl.java b/engine/orchestration/src/main/java/com/cloud/vm/VirtualMachineManagerImpl.java
index 830e8a1e7929..fa589f127425 100755
--- a/engine/orchestration/src/main/java/com/cloud/vm/VirtualMachineManagerImpl.java
+++ b/engine/orchestration/src/main/java/com/cloud/vm/VirtualMachineManagerImpl.java
@@ -3182,7 +3182,8 @@ private void orchestrateReboot(final String vmUuid, final Map<VirtualMachineProf
 
             final Answer rebootAnswer = cmds.getAnswer(RebootAnswer.class);
             if (rebootAnswer != null && rebootAnswer.getResult()) {
-                if (dc.isSecurityGroupEnabled() && vm.getType() == VirtualMachine.Type.User) {
+                boolean isVmSecurityGroupEnabled = _securityGroupManager.isVmSecurityGroupEnabled(vm.getId());
+                if (isVmSecurityGroupEnabled && vm.getType() == VirtualMachine.Type.User) {
                     List<Long> affectedVms = new ArrayList<Long>();
                     affectedVms.add(vm.getId());
                     _securityGroupManager.scheduleRulesetUpdateToHosts(affectedVms, true, null);