Also filed an selinux-policy bug to support /efi https://bugzilla.redhat.com/show_bug.cgi?id=1571962 --- Chris Murphy