Bug 556856

Summary:	cups interface scripts in wrong selinux context
Product:	Red Hat Enterprise Linux 5	Reporter:	Tomas Edwardsson <tommi>
Component:	cups	Assignee:	Tim Waugh <twaugh>
Status:	CLOSED DUPLICATE	QA Contact:	qe-baseos-daemons
Severity:	medium	Docs Contact:
Priority:	low
Version:	5.4
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2010-01-19 16:21:55 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Tomas Edwardsson 2010-01-19 16:04:48 UTC

Description of problem:
SELinux prevents cupsd from executing interface scripts in /etc/cups/interfaces


How reproducible:
Create a printer with a interface script

lpadmin -p test-interface-printer -v file:/dev/null -i /tmp/interface-script.sh

Try to print on your test-interface-printer
  

Actual results:
SELinux is preventing cupsd (cupsd_t) "execute" to ./interface-script.sh (cupsd_etc_t). For complete SELinux messages. run sealert -l db5a0905-2c1f-4735-9d06-8ad6fcd7bb33 Jan 19 14:14:11 sofia setroubleshoot: SELinux is preventing test-interface-printer (cupsd_t) "execute_no_trans" to /etc/cups/interfaces/interface-script.sh (cupsd_etc_t). 


Fix:

semanage fcontext -a -t cupsd_exec_t "/etc/cups/interfaces(/.*)?"
restorecon -R /etc/cups/interfaces

Comment 1 Tim Waugh 2010-01-19 16:21:55 UTC


*** This bug has been marked as a duplicate of bug 550015 ***