2014-02-16 13:59:43

by Mira Ressel

Subject: [refpolicy] [PATCH] Label grub2-install as bootloader_exec_t

---
policy/modules/admin/bootloader.fc | 1 +
1 file changed, 1 insertion(+)

diff --git a/policy/modules/admin/bootloader.fc b/policy/modules/admin/bootloader.fc
index 8c7e6c2..d56f931 100644
--- a/policy/modules/admin/bootloader.fc
+++ b/policy/modules/admin/bootloader.fc
@@ -8,4 +8,5 @@

/usr/sbin/grub -- gen_context(system_u:object_r:bootloader_exec_t,s0)
/usr/sbin/grub2?-bios-setup -- gen_context(system_u:object_r:bootloader_exec_t,s0)
+/usr/sbin/grub2?-install -- gen_context(system_u:object_r:bootloader_exec_t,s0)
/usr/sbin/grub2?-probe -- gen_context(system_u:object_r:bootloader_exec_t,s0)
--
1.8.5.5

2014-03-03 14:07:42

by cpebenito

Subject: [refpolicy] [PATCH] Label grub2-install as bootloader_exec_t

On 2/16/2014 8:59 AM, Luis Ressel wrote:
> ---
> policy/modules/admin/bootloader.fc | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/policy/modules/admin/bootloader.fc b/policy/modules/admin/bootloader.fc
> index 8c7e6c2..d56f931 100644
> --- a/policy/modules/admin/bootloader.fc
> +++ b/policy/modules/admin/bootloader.fc
> @@ -8,4 +8,5 @@
>
> /usr/sbin/grub -- gen_context(system_u:object_r:bootloader_exec_t,s0)
> /usr/sbin/grub2?-bios-setup -- gen_context(system_u:object_r:bootloader_exec_t,s0)
> +/usr/sbin/grub2?-install -- gen_context(system_u:object_r:bootloader_exec_t,s0)
> /usr/sbin/grub2?-probe -- gen_context(system_u:object_r:bootloader_exec_t,s0)

Merged.

--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com