6fb9a34679
The grub2-install application runs a few grub2-* commands. Two of those, grub2-bios-setup and grub2-probe, need read/write access to the (fixed) disks. Mark those two applications as bootloader_exec_t (as is the case with the "grub" legacy command in the past) allows the commands to continue. Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
12 lines
584 B
Plaintext
12 lines
584 B
Plaintext
|
|
/etc/lilo\.conf.* -- gen_context(system_u:object_r:bootloader_etc_t,s0)
|
|
/etc/yaboot\.conf.* -- gen_context(system_u:object_r:bootloader_etc_t,s0)
|
|
|
|
/sbin/grub -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
/sbin/lilo.* -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
/sbin/ybin.* -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
|
|
/usr/sbin/grub -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
/usr/sbin/grub2-bios-setup -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
/usr/sbin/grub2-probe -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|