Commit Graph

83 Commits

Author SHA1 Message Date
Sam Feifer
cafc25a0b0 Allow postgreSQL selinux and gid to be 0 2024-01-31 15:52:40 -05:00
Fedora Release Engineering
21e86afeef Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-24 20:56:59 +00:00
Fedora Release Engineering
0be17e0a47 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild 2024-01-20 21:25:51 +00:00
Sam Feifer
0a301faf67 Fix postgresql AVC denials 2023-12-18 10:42:57 -05:00
Sam Feifer
51103637cb Fix coredump caused by selinux denial 2023-12-15 11:55:48 -05:00
Sam Feifer
9a03130965 Fix AVC denials found only on certain architectures 2023-11-30 09:48:06 -05:00
Sam Feifer
66cf89ab9b Fix AVC denials on specific architectures 2023-11-20 11:16:51 -05:00
Sam Feifer
f71f22a242 Fix additional AVC denials found when testing 2023-11-15 15:22:58 -05:00
Sam Feifer
23e6d56b77 Stop running faulty tests 2023-11-15 12:42:52 -05:00
Sam Feifer
756e76aa17 Fix AVC denials found when testing 2023-11-15 11:48:55 -05:00
Sam Feifer
2952ea608f Hide relabeling messages when installing selinux 2023-11-09 15:36:38 -05:00
Sam Feifer
8e32711fab Install selinux policy when installing grafana 2023-11-08 17:16:23 -05:00
Sam Feifer
13a60acf34 Skip problematic tests 2023-10-05 11:55:46 -04:00
Sam Feifer
1e676f5c30 Added selinux policy 2023-09-28 12:30:08 -04:00
Jan Kurik
3ffdbb5a31 Updated licence string to follow SPDX 2023-07-25 17:38:46 +02:00
Carl George
f70a707434 resolve CVE-2023-3128 grafana: Remove Email Lookup from oauth integrations 2023-07-22 00:37:49 -05:00
Fedora Release Engineering
53f206ac65 Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-07-20 05:29:13 +00:00
Yaakov Selkowitz
06d14c376f Enable FIPS mode in ELN builds
ELN now has a RHEL-like golang with FIPS support.  With golang 1.19,
GOEXPERIMENT=boringcrypto is needed because of the boring.Enabled()
calls.
2023-06-29 13:52:31 -04:00
Stan Cox
11d08a039c Update to upstream Grafana 9.2.10 2023-05-18 11:05:15 -04:00
Stan Cox
07328769ba Update to upstream Grafana 9.2.10 2023-05-18 07:08:23 -04:00
Fedora Release Engineering
ce811794ee Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2023-01-19 11:27:15 +00:00
Yaakov Selkowitz
89a8b91117 Disable FIPS on ELN
ELN golang does not include the boringcrypto support present in RHEL.
2022-12-06 02:48:24 +00:00
Andreas Gerstmayr
329ced8843 update to upstream Grafana 9.0.9 2022-09-21 14:28:28 +02:00
Andreas Gerstmayr
b5e14d4705 update to upstream Grafana 9.0.8 2022-09-15 18:12:52 +02:00
Andreas Gerstmayr
ed6a83eef2 drop makefile in favor of create_bundles.sh script, drop husky patch 2022-09-13 19:52:37 +02:00
Andreas Gerstmayr
95ac515fcf don't list /usr/share/grafana/conf twice 2022-09-07 15:51:54 +02:00
Andreas Gerstmayr
d5d007a430 sync provides/obsoletes with CentOS versions 2022-09-07 13:51:06 +02:00
Andreas Gerstmayr
ffa6c2bb08 update NODE_OPTIONS in build script, not in container
* specify legacy OpenSSL provider until file-loader is removed
* fix UI test command
2022-09-06 17:44:13 +02:00
Andreas Gerstmayr
4d72cb1a8e update to upstream Grafana 9.0.5 2022-07-27 12:43:28 +02:00
Fedora Release Engineering
63c89e23be Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-21 12:57:10 +00:00
Andreas Gerstmayr
4eb2bc3050 fix quoting in grafana-cli wrapper script 2022-07-14 14:28:36 +02:00
Andreas Gerstmayr
0ca120b8ba use systemd-sysusers to create the Grafana user and group 2022-07-13 13:13:01 +02:00
Andreas Gerstmayr
cba27cf903 update to upstream Grafana 9.0.2 2022-07-07 19:49:51 +02:00
Andreas Gerstmayr
f922bfd4ed update to upstream Grafana 8.5.6 2022-06-29 12:17:46 +02:00
Robert-André Mauchin
7a25e7f28a Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 2022-06-19 11:47:40 +02:00
Andreas Gerstmayr
0215856343 remove openssl build dependency, add conditional for HMAC-SHA256 patch 2022-04-19 14:29:40 +02:00
Andreas Gerstmayr
bbde02e26d use clamp-mtime when generating the vendor and webpack tarballs
and round tarball mtime timestamp to midnight, to match SOURCE_DATE_EPOCH
2022-04-11 18:00:46 +02:00
Andreas Gerstmayr
8efab3c896 update to upstream Grafana 7.5.15, resolve CVE-2021-23648 and CVE-2022-21698 2022-04-08 18:57:17 +02:00
Andreas Gerstmayr
6463efb1e2 update to upstream Grafana 7.5.13, support go1.18 2022-01-28 19:33:35 +01:00
Fedora Release Engineering
8b29cc71e2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-20 11:42:54 +00:00
Andreas Gerstmayr
4905045f54 use HMAC-SHA-256 instead of SHA-1 to generate password reset tokens
update FIPS tests in check phase
2022-01-18 19:28:03 +01:00
Andreas Gerstmayr
9d18845fa6 fix CVE-2021-44716 and CVE-2021-43813 2022-01-18 16:12:34 +01:00
Andreas Gerstmayr
7a938610cf update to upstream version 7.5.11 2021-10-11 15:31:16 +02:00
Andreas Gerstmayr
b3f6907658 update patch handling and instructions 2021-10-08 16:53:45 +02:00
Andreas Gerstmayr
fea303393e define gobuild and gotest macros in case they are not available 2021-09-30 18:08:19 +02:00
Andreas Gerstmayr
7f0368f33d update to upstream version 7.5.10 2021-09-30 17:08:41 +02:00
Andreas Gerstmayr
b1a75dfdd6 rebuild to resolve CVE-2021-34558 2021-08-16 15:29:29 +02:00
Fedora Release Engineering
4099bfd2fb - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2021-07-22 07:02:16 +00:00
Andreas Gerstmayr
6556266917 rebuild for 7.5.9-2
* remove unused dependency property-information
* always include FIPS patch in SRPM
2021-07-08 16:16:48 +02:00
Andreas Gerstmayr
31059f957a setup OpenSSL FIPS provider in test phase
Since OpenSSL 3 GOLANG_FIPS=1 is not sufficient anymore to exercise
FIPS functionality, therefore a custom OpenSSL config is created
enabling the OpenSSL FIPS provider in the test phase of the specfile.
2021-06-29 17:49:21 +02:00