rpms/grafana
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Resolves: RHEL-132756

Browse Source
This commit is contained in:
Sam Feifer 2025-12-02 16:24:31 -05:00
parent 7e04dcab8a
commit 14964dea1a
2 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
grafana.spec
View File

@ -1019,6 +1019,7 @@ done
%changelog
* Mon Dec 1 2025 Sam Feifer <sfeifer@redhat.com> 10.2.6-22
- Resolves RHEL-125629: CVE-2025-58183
- Resolves RHEL-132756: Grafana-selinux prevents plugins from searching cgroups
* Wed Jun 18 2025 Sam Feifer <sfeifer@redhat.com> 10.2.6-20
- Resolves RHEL-97520: Rework grafana-selinux spec file sections

10
grafana.te
View File

@ -108,6 +108,16 @@ allow grafana_t self:unix_stream_socket connectto;
allow grafana_t self:netlink_route_socket { create bind getattr nlmsg_read };
optional_policy(`
require {
type cgroup_t;
class dir { search };
class file { open read };
}
allow grafana_t cgroup_t:dir search;
allow grafana_t cgroup_t:file { open read };
')
optional_policy(`
require {
type smtp_port_t;