rpms/grafana
5
0
Fork 0
Code Issues Pull Requests Releases Activity

Add /usr/share/grafana to systemd-sysusers --replace

Browse Source 
Resolves: rhbz#2213698
This commit is contained in:
Stan Cox 2023-07-22 21:53:08 -04:00
parent a651b40d3e
commit 0d8023013c
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
grafana.spec
View File

@ -33,7 +33,7 @@ end}
Name: grafana
Version: 9.2.10
Release: 5%{?dist}
Release: 6%{?dist}
Summary: Metrics dashboard and graph editor
License: AGPLv3
URL: https://grafana.org
@ -829,7 +829,7 @@ install -p -m 644 -D %{SOURCE3} %{buildroot}%{_sysusersdir}/%{name}.conf
# sysusers_create_compat macro is not present in rhel8
# SOURCE3 may not be available in %%prein stage so specify on command line via --replace
# instead of "systemd-sysusers %%{SOURCE3}"
echo 'u grafana - "Grafana user account"' | systemd-sysusers --replace=/usr/lib/sysusers.d/grafana.conf -
echo 'u grafana - "Grafana user account" /usr/share/grafana' | systemd-sysusers --replace=/usr/lib/sysusers.d/grafana.conf -
%preun
%systemd_preun grafana-server.service
@ -933,6 +933,9 @@ OPENSSL_FORCE_FIPS_MODE=1 GOLANG_FIPS=1 go test -v ./pkg/util -run TestEncryptio
%changelog
* Fri Jul 21 2023 Stan Cox <scox@redhat.com> 9.2.10-6
- Add /usr/share/grafana to systemd-sysusers --replace
* Thu Jul 20 2023 Stan Cox <scox@redhat.com> 9.2.10-5
- resolve CVE-2023-3128 grafana: account takeover possible when using Azure AD OAuth