From e7a6ed970f1f2f9ec359d755c2681da14009fe58 Mon Sep 17 00:00:00 2001 From: Andrew Lukoshko Date: Thu, 7 Aug 2025 10:56:50 +0000 Subject: [PATCH] import OL grafana-10.2.6-15.el9_6 --- SOURCES/grafana.te | 3 +++ SPECS/grafana.spec | 5 ++++- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/SOURCES/grafana.te b/SOURCES/grafana.te index 910fd54..162bb4a 100644 --- a/SOURCES/grafana.te +++ b/SOURCES/grafana.te @@ -95,6 +95,9 @@ allow grafana_t self:unix_dgram_socket create_socket_perms; allow grafana_t grafana_port_t:tcp_socket { name_bind name_connect }; +allow grafana_t grafana_var_lib_t:file { execute execute_no_trans }; +allow grafana_t grafana_var_lib_t:file map; + allow grafana_t self:unix_stream_socket connectto; allow grafana_t self:netlink_route_socket { create bind getattr nlmsg_read }; diff --git a/SPECS/grafana.spec b/SPECS/grafana.spec index 27232d8..5af0f1e 100644 --- a/SPECS/grafana.spec +++ b/SPECS/grafana.spec @@ -25,7 +25,7 @@ end} Name: grafana Version: 10.2.6 -Release: 14%{?dist} +Release: 15%{?dist} Summary: Metrics dashboard and graph editor License: AGPL-3.0-only URL: https://grafana.org @@ -1032,6 +1032,9 @@ fi %{_datadir}/selinux/*/grafana.pp %changelog +* Tue Jul 22 2025 Sam Feifer 10.2.6-15 +- Resolves RHEL-101998: Grafana SELinux policy prevents loading plugins + * Tue May 13 2025 Sam Feifer 10.2.6-14 - Resolves RHEL-89309: CVE-2025-22871