From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Mon, 3 Mar 2014 09:07:42 -0500 Subject: [refpolicy] [PATCH] Label grub2-install as bootloader_exec_t In-Reply-To: <1392559183-3174-1-git-send-email-aranea@aixah.de> References: <1392559183-3174-1-git-send-email-aranea@aixah.de> Message-ID: <53148CAE.6010006@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 2/16/2014 8:59 AM, Luis Ressel wrote: > --- > policy/modules/admin/bootloader.fc | 1 + > 1 file changed, 1 insertion(+) > > diff --git a/policy/modules/admin/bootloader.fc b/policy/modules/admin/bootloader.fc > index 8c7e6c2..d56f931 100644 > --- a/policy/modules/admin/bootloader.fc > +++ b/policy/modules/admin/bootloader.fc > @@ -8,4 +8,5 @@ > > /usr/sbin/grub -- gen_context(system_u:object_r:bootloader_exec_t,s0) > /usr/sbin/grub2?-bios-setup -- gen_context(system_u:object_r:bootloader_exec_t,s0) > +/usr/sbin/grub2?-install -- gen_context(system_u:object_r:bootloader_exec_t,s0) > /usr/sbin/grub2?-probe -- gen_context(system_u:object_r:bootloader_exec_t,s0) Merged. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com