Fixes selinux denials found testing
Resolves: RHEL-7505
This commit is contained in:
parent
d7ec3d11ff
commit
4d5fa19192
@ -25,7 +25,7 @@ end}
|
|||||||
|
|
||||||
Name: grafana
|
Name: grafana
|
||||||
Version: 9.2.10
|
Version: 9.2.10
|
||||||
Release: 10%{?dist}
|
Release: 11%{?dist}
|
||||||
Summary: Metrics dashboard and graph editor
|
Summary: Metrics dashboard and graph editor
|
||||||
License: AGPL-3.0-only
|
License: AGPL-3.0-only
|
||||||
URL: https://grafana.org
|
URL: https://grafana.org
|
||||||
@ -1006,6 +1006,10 @@ fi
|
|||||||
%{_datadir}/selinux/*/grafana.pp
|
%{_datadir}/selinux/*/grafana.pp
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Tue Nov 21 2023 Sam Feifer <sfeifer@redhat.com> 9.2.10-11
|
||||||
|
- Resolves RHEL-7505
|
||||||
|
- Fixes selinux denials found when testing on certain architectures
|
||||||
|
|
||||||
* Wed Nov 15 2023 Sam Feifer <sfeifer@redhat.com> 9.2.10-10
|
* Wed Nov 15 2023 Sam Feifer <sfeifer@redhat.com> 9.2.10-10
|
||||||
- Resolves RHEL-7505
|
- Resolves RHEL-7505
|
||||||
- Adds a selinux policy for grafana
|
- Adds a selinux policy for grafana
|
||||||
|
@ -87,6 +87,8 @@ allow grafana_t grafana_port_t:tcp_socket { name_bind name_connect };
|
|||||||
|
|
||||||
allow grafana_t self:unix_stream_socket connectto;
|
allow grafana_t self:unix_stream_socket connectto;
|
||||||
|
|
||||||
|
allow grafana_t self:netlink_route_socket create;
|
||||||
|
|
||||||
optional_policy(`
|
optional_policy(`
|
||||||
require {
|
require {
|
||||||
type smtp_port_t;
|
type smtp_port_t;
|
||||||
|
Loading…
Reference in New Issue
Block a user