rpms/grafana
6
0
Fork 0
Code Issues Pull Requests Releases Activity

Resolves: RHEL-75919

Browse Source
This commit is contained in:
Sam Feifer 2025-01-29 15:30:16 -05:00
parent f79e3307b2
commit 25ed4251ef
2 changed files with 16 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
grafana.spec
View File

@ -25,7 +25,7 @@ end}
Name: grafana Name: grafana
Version: 10.2.6 Version: 10.2.6
Release: 9%{?dist} Release: 10%{?dist}
Summary: Metrics dashboard and graph editor Summary: Metrics dashboard and graph editor
License: AGPL-3.0-only License: AGPL-3.0-only
URL: https://grafana.org URL: https://grafana.org
@ -1028,6 +1028,9 @@ fi
%{_datadir}/selinux/*/grafana.pp %{_datadir}/selinux/*/grafana.pp
%changelog %changelog
* Wed Jan 29 2025 Sam Feifer <sfeifer@redhat.com> 10.2.6-10
- Resolves RHEL-75919: grafana selinux issue with autofs_t
* Thu Dec 5 2024 Sam Feifer <sfeifer@redhat.com> 10.2.6-9 * Thu Dec 5 2024 Sam Feifer <sfeifer@redhat.com> 10.2.6-9
- Resolves RHEL-69939: allow mssql datasource in selinux policy - Resolves RHEL-69939: allow mssql datasource in selinux policy

16
grafana.te
View File

@ -134,6 +134,14 @@ optional_policy(`
allow grafana_t proc_net_t:lnk_file read; allow grafana_t proc_net_t:lnk_file read;
') ')
optional_policy(`
require {
type autofs_t;
class dir {getattr};
}
allow grafana_t autofs_t:dir getattr;
')
manage_dirs_pattern(grafana_t, grafana_conf_t, grafana_conf_t) manage_dirs_pattern(grafana_t, grafana_conf_t, grafana_conf_t)
manage_files_pattern(grafana_t, grafana_conf_t, grafana_conf_t) manage_files_pattern(grafana_t, grafana_conf_t, grafana_conf_t)
@ -197,14 +205,14 @@ tunable_policy(`grafana_can_tcp_connect_mysql_port',` # Mysql default tcp port 3
corenet_tcp_connect_mysqld_port(grafana_t) corenet_tcp_connect_mysqld_port(grafana_t)
') ')
tunable_policy(`grafana_can_tcp_connect_postgresql_port',` # Postgresql default tcp port 5432
corenet_tcp_connect_postgresql_port(grafana_t)
')
tunable_policy(`grafana_can_tcp_connect_prometheus_port',` # Prometheus default tcp port 9090 tunable_policy(`grafana_can_tcp_connect_prometheus_port',` # Prometheus default tcp port 9090
corenet_tcp_connect_websm_port(grafana_t) corenet_tcp_connect_websm_port(grafana_t)
') ')
tunable_policy(`grafana_can_tcp_connect_postgresql_port',` # Postgresql default tcp port 5432
corenet_tcp_connect_postgresql_port(grafana_t)
')
optional_policy(` optional_policy(`
systemd_private_tmp(grafana_tmp_t) systemd_private_tmp(grafana_tmp_t)
') ')