Bug 1417584
Summary: | SELinux is preventing udev-add-printe from using the 'execmem' accesses on a process. | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Delete My Account <c.crispino8611> |
Component: | selinux-policy | Assignee: | Lukas Vrabec <lvrabec> |
Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | 26 | CC: | basilajith, david.w.potter, deformtoformastar, dominick.grift, dwalsh, f.demiralp, Gecko8211, imgx64+bzrh, jackcholt, jholmes, lvrabec, marek.letec, me, mgrepl, mikhail.v.gavrilov, mkasik, pablodav, pavel.ondracka, plautrba, pmoore, psppsn96, rockonthemoonfm, runner7272, ssekidde |
Target Milestone: | --- | Keywords: | Reopened |
Target Release: | --- | ||
Hardware: | x86_64 | ||
OS: | Unspecified | ||
Whiteboard: | abrt_hash:f0e126946635f3048b7378b3dfdf299a53d5ba0327982d0161d8569f875c453b; | ||
Fixed In Version: | selinux-policy-3.13.1-260.17.fc26 | Doc Type: | If docs needed, set a value |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2017-12-19 21:32:28 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Delete My Account
2017-01-30 11:04:48 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 26 development cycle. Changing version to '26'. Description of problem: When I connect print to USB, SELINUX prevents the assistant to launch. Version-Release number of selected component: selinux-policy-3.13.1-249.fc26.noarch Additional info: reporter: libreport-2.9.1 hashmarkername: setroubleshoot kernel: 4.11.0-0.rc5.git0.1.fc26.x86_64 type: libreport Description of problem: Just switch on USB printer HP LazerJet M1132MFP Version-Release number of selected component: selinux-policy-3.13.1-257.fc26.noarch Additional info: reporter: libreport-2.9.1 hashmarkername: setroubleshoot kernel: 4.11.5-300.fc26.x86_64 type: libreport Description of problem: A new printer Cannon iX6550 is connected to a USB port Version-Release number of selected component: selinux-policy-3.13.1-259.fc26.noarch Additional info: reporter: libreport-2.9.1 hashmarkername: setroubleshoot kernel: 4.11.6-301.fc26.x86_64 type: libreport Description of problem: Attaching a printer. Version-Release number of selected component: selinux-policy-3.13.1-259.fc26.noarch Additional info: reporter: libreport-2.9.1 hashmarkername: setroubleshoot kernel: 4.12.0-1.fc27.x86_64 type: libreport Description of problem: I just connected usb printer. Version-Release number of selected component: selinux-policy-3.13.1-259.fc26.noarch Additional info: reporter: libreport-2.9.1 hashmarkername: setroubleshoot kernel: 4.11.9-300.fc26.x86_64 type: libreport Description of problem: Connected Canon MF-3010 printer to computer Version-Release number of selected component: selinux-policy-3.13.1-259.fc26.noarch Additional info: reporter: libreport-2.9.1 hashmarkername: setroubleshoot kernel: 4.11.9-300.fc26.x86_64 type: libreport Description of problem: Added printer after fresh install of F26. Version-Release number of selected component: selinux-policy-3.13.1-259.fc26.noarch Additional info: reporter: libreport-2.9.1 hashmarkername: setroubleshoot kernel: 4.11.10-300.fc26.x86_64 type: libreport Description of problem: To reproduce the denial it is enough to connect a USB printer to your system when running e.g. Gnome on it. The udev script which should call a DBus method to add the printer won't execute and hence the printer is not added. Version-Release number of selected component: selinux-policy-3.13.1-260.1.fc26.noarch Additional info: reporter: libreport-2.9.1 hashmarkername: setroubleshoot kernel: 4.11.11-300.fc26.x86_64 type: libreport I'm reopening this bug because it is still valid. Description of problem: I attached a printer by USB Version-Release number of selected component: selinux-policy-3.13.1-260.3.fc26.noarch Additional info: reporter: libreport-2.9.1 hashmarkername: setroubleshoot kernel: 4.11.11-300.fc26.x86_64 type: libreport Description of problem: After upgrading to Fedora 26, I can no longer print from any applications. As soon as I try to print, I get a message saying printer stopped. I use TurboPrint to provide the printer driver. My printer is a Canon MP640. I am able to print a test page from the TurboPrint control. I have never had a problem before with printing using TurboPrint. I followed the instructions and executed the following commands: sudo ausearch -c 'udev-add-printe' --raw | audit2allow -M my-udevaddprinte sudo semodule -X 300 -i my-udevaddprinte.pp Version-Release number of selected component: selinux-policy-3.13.1-260.3.fc26.noarch Additional info: reporter: libreport-2.9.1 hashmarkername: setroubleshoot kernel: 4.11.11-300.fc26.x86_64 type: libreport Please also see bug 1479260. If I disable SELinux (using the command sudo setenforce 0), I still can not print. After issuing the above command, I checked the status of SELinux using getenforce, and it was definitely set to permissive, yet I still have the same problem. Could this inability to print be somthing to do with CUPS? I restored SELinux using the command sudo setenforce 1. Downgrading the qpdf-libs package has solved the problem. See bug report 1478537. Description of problem: new install ? Version-Release number of selected component: selinux-policy-3.13.1-259.fc26.noarch Additional info: reporter: libreport-2.9.1 hashmarkername: setroubleshoot kernel: 4.13.9-200.fc26.x86_64 type: libreport *** Bug 1507698 has been marked as a duplicate of this bug. *** Description of problem: Plugged in HP LaserJet 4240n over USB (USB ID 03f0:6a17). Version-Release number of selected component: selinux-policy-3.13.1-260.1.fc26.noarch Additional info: reporter: libreport-2.9.1 hashmarkername: setroubleshoot kernel: 4.11.10-300.fc26.x86_64 type: libreport selinux-policy-3.13.1-260.16.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-39e6a2f7e7 selinux-policy-3.13.1-260.16.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-39e6a2f7e7 selinux-policy-3.13.1-260.17.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-39e6a2f7e7 selinux-policy-3.13.1-260.17.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-39e6a2f7e7 selinux-policy-3.13.1-260.17.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report. |