|
 |
1b20a51 |
diff --git a/policy/modules/admin/bootloader.fc b/policy/modules/admin/bootloader.fc
|
|
|
1b20a51 |
index 7a6f06f..e117271 100644
|
|
|
1b20a51 |
--- a/policy/modules/admin/bootloader.fc
|
|
|
1b20a51 |
+++ b/policy/modules/admin/bootloader.fc
|
|
|
1b20a51 |
@@ -1,9 +1,11 @@
|
|
|
1b20a51 |
-
|
|
|
1b20a51 |
+/etc/default/grub -- gen_context(system_u:object_r:bootloader_etc_t,s0)
|
|
|
1b20a51 |
/etc/lilo\.conf.* -- gen_context(system_u:object_r:bootloader_etc_t,s0)
|
|
|
1b20a51 |
/etc/yaboot\.conf.* -- gen_context(system_u:object_r:bootloader_etc_t,s0)
|
|
|
1b20a51 |
|
|
|
1b20a51 |
-/sbin/grub -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
|
1b20a51 |
+/sbin/grub.* -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
|
1b20a51 |
+/sbin/installkernel -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
|
1b20a51 |
/sbin/lilo.* -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
|
1b20a51 |
+/sbin/new-kernel-pkg -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
|
1b20a51 |
/sbin/ybin.* -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
|
1b20a51 |
|
|
|
1b20a51 |
/usr/sbin/grub -- gen_context(system_u:object_r:bootloader_exec_t,s0)
|
|
|
1b20a51 |
diff --git a/policy/modules/admin/permissivedomains.te b/policy/modules/admin/permissivedomains.te
|
|
|
1b20a51 |
index f95087c..e7d705e 100644
|
|
|
1b20a51 |
--- a/policy/modules/admin/permissivedomains.te
|
|
|
1b20a51 |
+++ b/policy/modules/admin/permissivedomains.te
|
|
|
1b20a51 |
@@ -2,6 +2,14 @@
|
|
|
1b20a51 |
|
|
|
1b20a51 |
optional_policy(`
|
|
|
1b20a51 |
gen_require(`
|
|
|
1b20a51 |
+ type bootloader_t;
|
|
|
1b20a51 |
+ ')
|
|
|
1b20a51 |
+
|
|
|
1b20a51 |
+ permissive bootloader_t;
|
|
|
1b20a51 |
+')
|
|
|
1b20a51 |
+
|
|
|
1b20a51 |
+optional_policy(`
|
|
|
1b20a51 |
+ gen_require(`
|
|
|
1b20a51 |
type systemd_logger_t;
|
|
|
1b20a51 |
')
|