fbdf5f0ef8
In order to write the grub configuration and perform the preliminary checks, the grub-mkconfig command should run in the bootloader_t domain. As such, update the file context definition to be bootloader_exec_t.
14 lines
747 B
Plaintext
14 lines
747 B
Plaintext
|
|
/etc/lilo\.conf.* -- gen_context(system_u:object_r:bootloader_etc_t,s0)
|
|
/etc/yaboot\.conf.* -- gen_context(system_u:object_r:bootloader_etc_t,s0)
|
|
|
|
/sbin/grub -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
/sbin/lilo.* -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
/sbin/ybin.* -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
|
|
/usr/sbin/grub -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
/usr/sbin/grub2?-bios-setup -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
/usr/sbin/grub2?-install -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
/usr/sbin/grub2?-mkconfig -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
/usr/sbin/grub2?-probe -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|