Fix AVC denials

sfeifer · sfeifer · commit ca30a455c8de · 2023-11-30T09:20:11.000-05:00
diff --git a/grafana.te b/grafana.te
@@ -87,7 +87,7 @@ allow grafana_t grafana_port_t:tcp_socket { name_bind name_connect };
 
 allow grafana_t self:unix_stream_socket connectto;
 
-allow grafana_t self:netlink_route_socket create;
+allow grafana_t self:netlink_route_socket { create bind getattr nlmsg_read };
 
 optional_policy(`
 	require {
