From 45712bef2270c23ee034f982cb64cf1a52bde4e8 Mon Sep 17 00:00:00 2001
From: Josh Curl <josh@curl.me>
Date: Fri, 17 Jun 2016 09:13:40 -0700
Subject: [PATCH] Update SELinux files in installer

---
 scripts/installer/lay-down-os | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/scripts/installer/lay-down-os b/scripts/installer/lay-down-os
index 0ba35d44..7a8d7c4e 100755
--- a/scripts/installer/lay-down-os
+++ b/scripts/installer/lay-down-os
@@ -194,6 +194,15 @@ grub2_config "${KERNEL_ARGS}"
 pvgrub_config "${KERNEL_ARGS}"
 install_rancher
 
+seusers=${BASE_DIR}/etc/selinux/ros/seusers
+failsafe_context=${BASE_DIR}/etc/selinux/ros/contexts/failsafe_context
+if [ -f "${seusers}" ]; then
+    echo "__default__:unconfined_u:s0-s0:c0.c1023" > ${seusers}
+fi
+if [ -f "${failsafe_context}" ]; then
+    echo "unconfined_r:unconfined_t:s0" > ${failsafe_context}
+fi
+
 if [ "$KEXEC" = "y" ]; then
     if [ "$APPEND" = "" ]; then
         APPEND=$(cat /proc/cmdline)