rpms/grafana
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Resolves: RHEL-87861

Browse Source
This commit is contained in:
Sam Feifer 2025-06-17 13:47:21 -04:00
parent 3e3e9b64f7
commit 8288d3330a
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
grafana.spec
View File

@ -1022,6 +1022,7 @@ done
%changelog
* Tue Jun 17 2025 Sam Feifer <sfeifer@redhat.com> 10.2.6-14
- Resolves RHEL-97518: Rework grafana-selinux spec file sections
- Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections
* Tue May 13 2025 Sam Feifer <sfeifer@redhat.com> 10.2.6-13
- Resolves RHEL-89953: CVE-2025-4123

11
grafana.te
View File

@ -41,6 +41,13 @@ gen_tunable(grafana_can_tcp_connect_prometheus_port, false)
## </desc>
gen_tunable(grafana_can_tcp_connect_postgresql_port, false)
## <desc>
## <p>
## Allow grafana to connect to ldap's tcp port
## </p>
## </desc>
gen_tunable(grafana_can_tcp_connect_ldap_port, false)
type grafana_t;
type grafana_exec_t;
init_daemon_domain(grafana_t, grafana_exec_t)
@ -231,6 +238,10 @@ tunable_policy(`grafana_can_tcp_connect_postgresql_port',` # Postgresql default
corenet_tcp_connect_postgresql_port(grafana_t)
')
tunable_policy(`grafana_can_tcp_connect_ldap_port',`
corenet_tcp_connect_ldap_port(grafana_t)
')
optional_policy(`
systemd_private_tmp(grafana_tmp_t)
')