Attachment 654860 Details for Bug 882130 – File: description

File: description

description (text/plain), 2.16 KB, created by Frank Jacobberger on 2012-11-30 08:26:58 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Frank Jacobberger

Created: 2012-11-30 08:26:58 UTC

Size: 2.16 KB

patch

obsolete

>SELinux is preventing cupsd from 'execute' accesses on the file mfp.
>
>*****  Plugin catchall (100. confidence) suggests  ***************************
>
>If you believe that cupsd should be allowed execute access on the mfp file by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep cupsd /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Source Context                system_u:system_r:cupsd_t:s0-s0:c0.c1023
>Target Context                unconfined_u:object_r:user_home_t:s0
>Target Objects                mfp [ file ]
>Source                        cupsd
>Source Path                   cupsd
>Port                          <Unknown>
>Host                          (removed)
>Source RPM Packages           cups-1.5.4-16.fc18.x86_64
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.11.1-50.fc18.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 3.6.7-5.fc18.x86_64 #1 SMP Tue Nov
>                              20 19:40:08 UTC 2012 x86_64 x86_64
>Alert Count                   6
>First Seen                    2012-11-30 01:13:46 MST
>Last Seen                     2012-11-30 01:22:28 MST
>Local ID                      a619d17b-f828-4c04-a273-be226bd24a46
>
>Raw Audit Messages
>type=AVC msg=audit(1354263748.672:332): avc:  denied  { execute } for  pid=2198 comm="cups-deviced" name="mfp" dev="dm-1" ino=3160855 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file
>
>
>type=SYSCALL msg=audit(1354263748.672:332): arch=x86_64 syscall=execve success=no exit=EACCES a0=7fff66dd6900 a1=7fff66dd5c50 a2=7fff66dd7260 a3=7fff66dd5930 items=0 ppid=2185 pid=2198 auid=4294967295 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) ses=4294967295 comm=cups-deviced exe=/usr/lib/cups/daemon/cups-deviced subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
>
>Hash: cupsd,cupsd_t,user_home_t,file,execute
>
>audit2allow
>audit2allow -R

Actions: View

Attachments on bug 882130: 654860