rpms/grafana
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Resolves: RHEL-132759

Browse Source
This commit is contained in:
Sam Feifer 2025-12-02 16:38:55 -05:00
parent e32df08c9a
commit 3473016880
2 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
grafana.spec
View File

@ -1026,6 +1026,7 @@ fi
%changelog
* Mon Dec 1 2025 Sam Feifer <sfeifer@redhat.com> 9.2.10-26
- Resolves RHEL-125664: CVE-2025-58183
- Resolves RHEL-132759: Grafana-selinux prevents plugins from searching cgroups
* Wed Jun 4 2025 Sam Feifer <sfeifer@redhat.com> 9.2.10-25
- Resolves RHEL-89269: CVE-2025-22871

10
grafana.te
View File

@ -99,6 +99,16 @@ allow grafana_t self:unix_stream_socket connectto;
allow grafana_t self:netlink_route_socket { create bind getattr nlmsg_read };
optional_policy(`
require {
type cgroup_t;
class dir { search };
class file { open read };
}
allow grafana_t cgroup_t:dir search;
allow grafana_t cgroup_t:file { open read };
')
optional_policy(`
require {
type smtp_port_t;