Attachment 299686 Details for Bug 439748 – message when I try to print

message when I try to print

selinux_alert.txt (text/plain), 2.78 KB, created by Steve Hirschi on 2008-03-31 04:34:32 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Steve Hirschi

Created: 2008-03-31 04:34:32 UTC

Size: 2.78 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing sh (cupsd_t) "getattr" to /usr/bin/hpijs (hplip_exec_t).
>
>Detailed Description:
>
>SELinux denied access requested by sh. It is not expected that this access is
>required by sh and this access may signal an intrusion attempt. It is also
>possible that the specific version or configuration of the application is
>causing it to require additional access.
>
>Allowing Access:
>
>Sometimes labeling problems can cause SELinux denials. You could try to restore
>the default system file context for /usr/bin/hpijs,
>
>restorecon -v '/usr/bin/hpijs'
>
>If this does not work, there is currently no automatic way to allow this access.
>Instead, you can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:cupsd_t:SystemLow-SystemHigh
>Target Context                system_u:object_r:hplip_exec_t
>Target Objects                /usr/bin/hpijs [ file ]
>Source                        sh
>Source Path                   /bin/bash
>Port                          <Unknown>
>Host                          localhost.localdomain
>Source RPM Packages           bash-3.2-21.el5
>Target RPM Packages           hpijs-1.6.7-4.1.el5_0.3
>Policy RPM                    selinux-policy-2.4.6-121.el5
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall_file
>Host Name                     localhost.localdomain
>Platform                      Linux localhost.localdomain 2.6.18-84.el5 #1 SMP
>                              Fri Feb 29 16:26:52 EST 2008 x86_64 x86_64
>Alert Count                   14
>First Seen                    Sun 23 Mar 2008 02:40:12 PM MDT
>Last Seen                     Sun 30 Mar 2008 09:23:56 PM MDT
>Local ID                      d8fdb8e8-cb3f-4b7a-9dff-a6f45de5c699
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=localhost.localdomain type=AVC msg=audit(1206933836.942:72): avc:  denied  { getattr } for  pid=387 comm="sh" path="/usr/bin/hpijs" dev=dm-0 ino=10103679 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hplip_exec_t:s0 tclass=file
>
>host=localhost.localdomain type=SYSCALL msg=audit(1206933836.942:72): arch=c000003e syscall=4 success=no exit=-13 a0=7eaa2c0 a1=7fffb3fa7430 a2=7fffb3fa7430 a3=3 items=0 ppid=386 pid=387 auid=4294967295 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) ses=4294967295 comm="sh" exe="/bin/bash" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>
>

Actions: View

Attachments on bug 439748: 299686