rpms/grafana
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Resolves: RHEL-132757

Browse Source
This commit is contained in:
Sam Feifer 2025-12-02 16:33:04 -05:00
parent 9379a29811
commit 55585d25c6
2 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
grafana.spec
View File

@ -1023,6 +1023,7 @@ done
%changelog
* Mon Dec 1 2025 Sam Feifer <sfeifer@redhat.com> 10.2.6-18
- Resolves RHEL-125696: CVE-2025-58183
- Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups
* Wed Jun 18 2025 Sam Feifer <sfeifer@redhat.com> 10.2.6-15
- Resolves RHEL-97518: Rework grafana-selinux spec file sections

10
grafana.te
View File

@ -108,6 +108,16 @@ allow grafana_t self:unix_stream_socket connectto;
allow grafana_t self:netlink_route_socket { create bind getattr nlmsg_read };
optional_policy(`
require {
type cgroup_t;
class dir { search };
class file { open read };
}
allow grafana_t cgroup_t:dir search;
allow grafana_t cgroup_t:file { open read };
')
optional_policy(`
require {
type smtp_port_t;