--- a/usr/src/cmd/rbac/Makefile	Fri Oct 29 08:09:13 2010 -0600
+++ b/usr/src/cmd/rbac/Makefile	Mon Nov 01 10:53:05 2010 -0700
@@ -23,7 +23,9 @@
 #
 #
 
-EXECATTRFILES = exec_attr.SUNWgui-install
+EXECATTRFILES = exec_attr.SUNWgui-install \
+	exec_attr.system%2Finstall%2Fmedia%2Finternal
+
 PROFATTRFILES =
 
 include $(SRC)/cmd/Makefile.cmd

--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/usr/src/cmd/rbac/exec_attr.system%2Finstall%2Fmedia%2Finternal	Mon Nov 01 10:53:05 2010 -0700
@@ -0,0 +1,24 @@
+#
+# CDDL HEADER START
+#
+# The contents of this file are subject to the terms of the
+# Common Development and Distribution License (the "License").
+# You may not use this file except in compliance with the License.
+#
+# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
+# or http://www.opensolaris.org/os/licensing.
+# See the License for the specific language governing permissions
+# and limitations under the License.
+#
+# When distributing Covered Code, include this CDDL HEADER in each
+# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
+# If applicable, add the following below this CDDL HEADER, with the
+# fields enclosed by brackets "[]" replaced with your own identifying
+# information: Portions Copyright [yyyy] [name of copyright owner]
+#
+# CDDL HEADER END
+#
+#
+# Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved.
+#
+Software Installation:suser:cmd:::/usr/lib/install/live_img_pkg5_prep:uid=0

--- a/usr/src/pkg/manifests/system-install-media-internal.mf	Fri Oct 29 08:09:13 2010 -0600
+++ b/usr/src/pkg/manifests/system-install-media-internal.mf	Mon Nov 01 10:53:05 2010 -0700
@@ -31,6 +31,8 @@
 set name=variant.opensolaris.zone value=global
 dir path=.cdrom group=sys
 dir path=etc group=sys
+dir path=etc/security group=sys
+dir path=etc/security/exec_attr.d group=sys
 dir path=etc/svc group=sys
 dir path=etc/svc/profile group=sys
 dir path=jack owner=jack group=staff
@@ -54,6 +56,7 @@
 dir path=usr/lib/install
 dir path=usr/sbin
 dir path=usr/share group=sys
+file path=etc/security/exec_attr.d/system%2Finstall%2Fmedia%2Finternal group=sys
 file path=etc/svc/profile/network_nwam.xml mode=0444 group=sys
 file path=jack/.bashrc mode=0644 owner=jack group=staff
 file path=jack/.config/autostart/iotrace.desktop owner=jack group=staff