Fix AVC denials found only on certain architectures

This commit is contained in:
Sam Feifer 2023-11-30 09:48:06 -05:00
parent 66cf89ab9b
commit 9a03130965
2 changed files with 5 additions and 2 deletions

View File

@ -25,7 +25,7 @@ end}
Name: grafana Name: grafana
Version: 9.2.10 Version: 9.2.10
Release: 11%{?dist} Release: 12%{?dist}
Summary: Metrics dashboard and graph editor Summary: Metrics dashboard and graph editor
License: AGPL-3.0-only License: AGPL-3.0-only
URL: https://grafana.org URL: https://grafana.org
@ -1004,6 +1004,9 @@ fi
%{_datadir}/selinux/*/grafana.pp %{_datadir}/selinux/*/grafana.pp
%changelog %changelog
* Thu Nov 30 2023 Sam Feifer <sfeifer@redhat.com> - 9.2.10-12
- Fix another set of AVC denials found testing only on some architectures
* Mon Nov 20 2023 Sam Feifer <sfeifer@redhat.com> - 9.2.10-11 * Mon Nov 20 2023 Sam Feifer <sfeifer@redhat.com> - 9.2.10-11
- Fix additional AVC denial found when testing on certain architectures - Fix additional AVC denial found when testing on certain architectures

View File

@ -87,7 +87,7 @@ allow grafana_t grafana_port_t:tcp_socket { name_bind name_connect };
allow grafana_t self:unix_stream_socket connectto; allow grafana_t self:unix_stream_socket connectto;
allow grafana_t self:netlink_route_socket create; allow grafana_t self:netlink_route_socket { create bind getattr nlmsg_read };
optional_policy(` optional_policy(`
require { require {