diff --git a/policy/modules/admin/bootloader.if b/policy/modules/admin/bootloader.if index ebe85701a..90b5e3ac7 100644 --- a/policy/modules/admin/bootloader.if +++ b/policy/modules/admin/bootloader.if @@ -15,6 +15,7 @@ interface(`bootloader_domtrans',` type bootloader_t, bootloader_exec_t; ') + corecmd_search_bin($1) domtrans_pattern($1, bootloader_exec_t, bootloader_t) ') @@ -105,6 +106,7 @@ interface(`bootloader_rw_tmp_files',` ') # FIXME: read tmp_t dir + files_search_tmp($1) allow $1 bootloader_tmp_t:file rw_file_perms; ')