rpms/grafana
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Resolves: RHEL-92648

Browse Source
This commit is contained in:
Sam Feifer 2025-06-17 14:05:30 -04:00
parent c5abcb2582
commit fd318e2a00
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
grafana.spec
View File

@ -1018,6 +1018,7 @@ done
%changelog
* Wed Jun 18 2025 Sam Feifer <sfeifer@redhat.com> 10.2.6-20
- Resolves RHEL-97520: Rework grafana-selinux spec file sections
- Resolves RHEL-92648: Add additional SELinux rules for grafana-selinux package to allow LDAP connections
* Tue May 13 2025 Sam Feifer <sfeifer@redhat.com> 10.2.6-18
- Resolves RHEL-89943: CVE-2025-4123

11
grafana.te
View File

@ -41,6 +41,13 @@ gen_tunable(grafana_can_tcp_connect_prometheus_port, false)
## </desc>
gen_tunable(grafana_can_tcp_connect_postgresql_port, false)
## <desc>
## <p>
## Allow grafana to connect to ldap's tcp port
## </p>
## </desc>
gen_tunable(grafana_can_tcp_connect_ldap_port, false)
type grafana_t;
type grafana_exec_t;
init_daemon_domain(grafana_t, grafana_exec_t)
@ -231,6 +238,10 @@ tunable_policy(`grafana_can_tcp_connect_postgresql_port',` # Postgresql default
corenet_tcp_connect_postgresql_port(grafana_t)
')
tunable_policy(`grafana_can_tcp_connect_ldap_port',`
corenet_tcp_connect_ldap_port(grafana_t)
')
optional_policy(`
systemd_private_tmp(grafana_tmp_t)
')