From 0d8023013c48af2b36416a8861f243fae3f7928b Mon Sep 17 00:00:00 2001 From: Stan Cox Date: Sat, 22 Jul 2023 21:53:08 -0400 Subject: [PATCH] Add /usr/share/grafana to systemd-sysusers --replace Resolves: rhbz#2213698 --- grafana.spec | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/grafana.spec b/grafana.spec index 58aa2b6..680a7db 100644 --- a/grafana.spec +++ b/grafana.spec @@ -33,7 +33,7 @@ end} Name: grafana Version: 9.2.10 -Release: 5%{?dist} +Release: 6%{?dist} Summary: Metrics dashboard and graph editor License: AGPLv3 URL: https://grafana.org @@ -829,7 +829,7 @@ install -p -m 644 -D %{SOURCE3} %{buildroot}%{_sysusersdir}/%{name}.conf # sysusers_create_compat macro is not present in rhel8 # SOURCE3 may not be available in %%prein stage so specify on command line via --replace # instead of "systemd-sysusers %%{SOURCE3}" -echo 'u grafana - "Grafana user account"' | systemd-sysusers --replace=/usr/lib/sysusers.d/grafana.conf - +echo 'u grafana - "Grafana user account" /usr/share/grafana' | systemd-sysusers --replace=/usr/lib/sysusers.d/grafana.conf - %preun %systemd_preun grafana-server.service @@ -933,6 +933,9 @@ OPENSSL_FORCE_FIPS_MODE=1 GOLANG_FIPS=1 go test -v ./pkg/util -run TestEncryptio %changelog +* Fri Jul 21 2023 Stan Cox 9.2.10-6 +- Add /usr/share/grafana to systemd-sysusers --replace + * Thu Jul 20 2023 Stan Cox 9.2.10-5 - resolve CVE-2023-3128 grafana: account takeover possible when using Azure AD OAuth