From f0628b3cd7d6d87139bde9b0f903b1ef348bc034 Mon Sep 17 00:00:00 2001
From: Dan Walsh <dwalsh@redhat.com>
Date: Wed, 20 Feb 2013 14:13:08 +0100
Subject: [PATCH] Always run restorecon at install time to make sure key files
 are labeled correctly

---
 selinux-policy.spec | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/selinux-policy.spec b/selinux-policy.spec
index b5b71366..064274e1 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -229,7 +229,7 @@ if [ $? = 0  -a "${SELINUXTYPE}" = %1 -a -f ${FILE_CONTEXT}.pre ]; then \
      rm -f ${FILE_CONTEXT}.pre; \
      /sbin/restorecon -R /home/*/.cache /home/*/.config; \
 fi; \
-/sbin/restorecon -e /run/media -R /root /var/log /var/run /etc/passwd* /etc/group* 2> /dev/null; \
+/sbin/restorecon -e /run/media -R /root /var/log /var/run /etc/passwd* /etc/group* /etc/*shadow* 2> /dev/null; \
 /sbin/restorecon -R /home/*/.cache /home/*/.config;
 
 %define preInstall() \