rpms
/
grafana
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Fixes selinux denials found testing 

Resolves: RHEL-7505
This commit is contained in:
Sam Feifer 2023-11-21 09:27:36 -05:00
parent d7ec3d11ff
commit 4d5fa19192
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
grafana.spec
View File

@ -25,7 +25,7 @@ end}
Name: grafana Name: grafana
Version: 9.2.10 Version: 9.2.10
Release: 10%{?dist} Release: 11%{?dist}
Summary: Metrics dashboard and graph editor Summary: Metrics dashboard and graph editor
License: AGPL-3.0-only License: AGPL-3.0-only
URL: https://grafana.org URL: https://grafana.org
@ -1006,6 +1006,10 @@ fi
%{_datadir}/selinux/*/grafana.pp %{_datadir}/selinux/*/grafana.pp
%changelog %changelog
* Tue Nov 21 2023 Sam Feifer <sfeifer@redhat.com> 9.2.10-11
- Resolves RHEL-7505
- Fixes selinux denials found when testing on certain architectures
* Wed Nov 15 2023 Sam Feifer <sfeifer@redhat.com> 9.2.10-10 * Wed Nov 15 2023 Sam Feifer <sfeifer@redhat.com> 9.2.10-10
- Resolves RHEL-7505 - Resolves RHEL-7505
- Adds a selinux policy for grafana - Adds a selinux policy for grafana

2
grafana.te
View File

@ -87,6 +87,8 @@ allow grafana_t grafana_port_t:tcp_socket { name_bind name_connect };
allow grafana_t self:unix_stream_socket connectto; allow grafana_t self:unix_stream_socket connectto;
allow grafana_t self:netlink_route_socket create;
optional_policy(` optional_policy(`
require { require {
type smtp_port_t; type smtp_port_t;