diff --git a/grafana.spec b/grafana.spec index 046646c..a4207c4 100644 --- a/grafana.spec +++ b/grafana.spec @@ -25,7 +25,7 @@ end} Name: grafana Version: 10.2.6 -Release: 9%{?dist} +Release: 10%{?dist} Summary: Metrics dashboard and graph editor License: AGPL-3.0-only URL: https://grafana.org @@ -1028,6 +1028,9 @@ fi %{_datadir}/selinux/*/grafana.pp %changelog +* Wed Jan 29 2025 Sam Feifer 10.2.6-10 +- Resolves RHEL-75919: grafana selinux issue with autofs_t + * Thu Dec 5 2024 Sam Feifer 10.2.6-9 - Resolves RHEL-69939: allow mssql datasource in selinux policy diff --git a/grafana.te b/grafana.te index 0f366e6..910fd54 100644 --- a/grafana.te +++ b/grafana.te @@ -134,6 +134,14 @@ optional_policy(` allow grafana_t proc_net_t:lnk_file read; ') +optional_policy(` + require { + type autofs_t; + class dir {getattr}; + } + allow grafana_t autofs_t:dir getattr; +') + manage_dirs_pattern(grafana_t, grafana_conf_t, grafana_conf_t) manage_files_pattern(grafana_t, grafana_conf_t, grafana_conf_t) @@ -197,14 +205,14 @@ tunable_policy(`grafana_can_tcp_connect_mysql_port',` # Mysql default tcp port 3 corenet_tcp_connect_mysqld_port(grafana_t) ') -tunable_policy(`grafana_can_tcp_connect_postgresql_port',` # Postgresql default tcp port 5432 - corenet_tcp_connect_postgresql_port(grafana_t) -') - tunable_policy(`grafana_can_tcp_connect_prometheus_port',` # Prometheus default tcp port 9090 corenet_tcp_connect_websm_port(grafana_t) ') +tunable_policy(`grafana_can_tcp_connect_postgresql_port',` # Postgresql default tcp port 5432 + corenet_tcp_connect_postgresql_port(grafana_t) +') + optional_policy(` systemd_private_tmp(grafana_tmp_t) ')