diff --git a/20-grub.install b/20-grub.install
index f2de776..cd58c48 100755
--- a/20-grub.install
+++ b/20-grub.install
@@ -89,6 +89,8 @@ case "$COMMAND" in
                     "$(date -u +%Y%m%d%H%M%S -d "$(stat -c '%y' "${KERNEL_DIR}")")" \
                     >"${BLS_TARGET}"
             fi
+            command -v restorecon &>/dev/null && \
+                restorecon -R "${BLS_TARGET}"
 
             LINUX="$(grep '^linux[ \t]' "${BLS_TARGET}" | sed -e 's,^linux[ \t]*,,')"
             INITRD="$(grep '^initrd[ \t]' "${BLS_TARGET}" | sed -e 's,^initrd[ \t]*,,')"
diff --git a/grub2.spec b/grub2.spec
index 185dbbe..f825b2a 100644
--- a/grub2.spec
+++ b/grub2.spec
@@ -7,7 +7,7 @@
 Name:		grub2
 Epoch:		1
 Version:	2.02
-Release:	93%{?dist}
+Release:	94%{?dist}
 Summary:	Bootloader with support for Linux, Multiboot and more
 License:	GPLv3+
 URL:		http://www.gnu.org/software/grub/
@@ -518,6 +518,10 @@ rm -r /boot/grub2.tmp/ || :
 %endif
 
 %changelog
+* Thu Jul 18 2019 Javier Martinez Canillas <javierm@redhat.com> - 2.02-94
+- 20-grub-install: Restore default SELinux security contexts for BLS files
+  Resolves: rhbz#1726020
+
 * Wed Jul 17 2019 Javier Martinez Canillas <javierm@redhat.com> - 2.02-93
 - Add btrfs snapshot submenu when BLS configuration is used
 - Move grub2-probe to the grub2-tools-minimal subpackage