Fix AVC denials on specific architectures

This commit is contained in:
Sam Feifer 2023-11-20 11:16:51 -05:00
parent f71f22a242
commit 66cf89ab9b
2 changed files with 6 additions and 1 deletions

View File

@ -25,7 +25,7 @@ end}
Name: grafana Name: grafana
Version: 9.2.10 Version: 9.2.10
Release: 10%{?dist} Release: 11%{?dist}
Summary: Metrics dashboard and graph editor Summary: Metrics dashboard and graph editor
License: AGPL-3.0-only License: AGPL-3.0-only
URL: https://grafana.org URL: https://grafana.org
@ -1004,6 +1004,9 @@ fi
%{_datadir}/selinux/*/grafana.pp %{_datadir}/selinux/*/grafana.pp
%changelog %changelog
* Mon Nov 20 2023 Sam Feifer <sfeifer@redhat.com> - 9.2.10-11
- Fix additional AVC denial found when testing on certain architectures
* Wed Nov 15 2023 Sam Feifer <sfeifer@redhat.com> - 9.2.10-10 * Wed Nov 15 2023 Sam Feifer <sfeifer@redhat.com> - 9.2.10-10
- Fix additional AVC denial found when testing - Fix additional AVC denial found when testing

View File

@ -87,6 +87,8 @@ allow grafana_t grafana_port_t:tcp_socket { name_bind name_connect };
allow grafana_t self:unix_stream_socket connectto; allow grafana_t self:unix_stream_socket connectto;
allow grafana_t self:netlink_route_socket create;
optional_policy(` optional_policy(`
require { require {
type smtp_port_t; type smtp_port_t;