Bug 865603
Summary: | SELinux is preventing /usr/lib/cups/filter/hpcups from 'search' accesses on the directory /var/log/hp. | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Tim Waugh <twaugh> | ||||||
Component: | hplip | Assignee: | Tim Waugh <twaugh> | ||||||
Status: | CLOSED CURRENTRELEASE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
Severity: | unspecified | Docs Contact: | |||||||
Priority: | unspecified | ||||||||
Version: | 18 | CC: | alanh, bugzilla, bugzilla, dbraunwarth, devonjanitz, dominick.grift, dwalsh, hector.rufrancos.list, igwa, jpopelka, lesjj10, mgrepl, mishu, mjs, mrexiani, msava, myas, neteler, peter.oosterlynck, phyrefyter, req1348, rich_pitts, rlocke, robert.l.kief, s_bumgardner, skotchman, subscribed-lists, twaugh, yann | ||||||
Target Milestone: | --- | ||||||||
Target Release: | --- | ||||||||
Hardware: | x86_64 | ||||||||
OS: | Unspecified | ||||||||
Whiteboard: | abrt_hash:665e0c8535d92ed0fc792887a2b6665dc08b101c09591426b94c6d31b7543272 | ||||||||
Fixed In Version: | hplip-3.12.10-4.a.fc18 | Doc Type: | Bug Fix | ||||||
Doc Text: | Story Points: | --- | |||||||
Clone Of: | Environment: | ||||||||
Last Closed: | 2012-11-28 11:49:49 UTC | Type: | --- | ||||||
Regression: | --- | Mount Type: | --- | ||||||
Documentation: | --- | CRM: | |||||||
Verified Versions: | Category: | --- | |||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||
Embargoed: | |||||||||
Attachments: |
|
Description
Tim Waugh
2012-10-11 21:21:32 UTC
Created attachment 625699 [details]
File: type
Created attachment 625700 [details]
File: hashmarkername
hpijs-3.12.10-1.fc18.x86_64 I wonder why HPLIP has to have its own log directory? Tim should it be labelled cups_var_log_t? And allow hplip_t to be able to write and or append to it? I am not sure why there is a hplip_t policy at all, should we just drop this and run everything as cupsd_t? Same for F17. This happens when I do the printer cleaning process from hplip-gui. Package: (null) OS Release: Fedora release 17 (Beefy Miracle) The latest update created this problem. Before it worked fine. Package: (null) OS Release: Fedora release 17 (Beefy Miracle) I sent a doc. to my printer from Gourmet Recipe Manager. The SELInux error icon then appeared. Package: (null) OS Release: Fedora release 17 (Beefy Miracle) New hplip and new selinux-policy came in on Oct 13th. I got the AVC error when trying to print a page. Package: (null) OS Release: Fedora release 17 (Beefy Miracle) IMHO hplip should be changed so that it uses $TMPDIR (/var/spool/cups/tmp) instead. This is the area for temporary files that should be used by CUPS filters and backends. Occurs when printing Package: (null) OS Release: Fedora release 17 (Beefy Miracle) 1)Starting HP Device Manager. 2)Printing to Google Chrome Package: (null) OS Release: Fedora release 17 (Beefy Miracle) Alert occurs every time I'm printing something Package: (null) OS Release: Fedora release 17 (Beefy Miracle) hplip-3.12.10-3.a.fc18 has been submitted as an update for Fedora 18. https://admin.fedoraproject.org/updates/FEDORA-2012-15918/hplip-3.12.10-3.a.fc18 hplip-3.12.10-3.a.fc17 has been submitted as an update for Fedora 17. https://admin.fedoraproject.org/updates/hplip-3.12.10-3.a.fc17 hplip-3.12.10-3.a.fc16 has been submitted as an update for Fedora 16. https://admin.fedoraproject.org/updates/hplip-3.12.10-3.a.fc16 Occured while printing a document to an HP D7400 over wifi. Package: (null) OS Release: Fedora release 17 (Beefy Miracle) Package hplip-3.12.10-3.a.fc17: * should fix your issue, * was pushed to the Fedora 17 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing hplip-3.12.10-3.a.fc17' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-16236/hplip-3.12.10-3.a.fc17 then log in and leave karma (feedback). Link is wrong or actually version of file. Should be hplip-3.12.10-4.a.fc17. Once I did the above with the corrected file name I was able to print a 12 page PDF file without any SELinux Alert. Seems to be fixed at this time for me anyway. Thanks. Correct instructions, for anyone else who would like to test: Package hplip-3.12.10-4.a.fc17: * should fix your issue, * was pushed to the Fedora 17 testing repository, * should be available at your local mirror. Update it with: # su -c 'yum update --enablerepo=updates-testing hplip-3.12.10-4.a.fc17' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-16236/hplip-3.12.10-4.a.fc17 then log in and leave karma (feedback). Work for me. Works for me, too. Printed a page of an e-mail. Package: (null) OS Release: Fedora release 17 (Beefy Miracle) This appears any time I print to one of my network based HP printers: HP Laserjet P2055dn in this case. The job does print, but this SELinux denial appears each time now. Package: (null) OS Release: Fedora release 17 (Beefy Miracle) Printed a web page. Package: (null) OS Release: Fedora release 17 (Beefy Miracle) hplip-3.12.10-4.a.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report. Attempt to print on an HP printer. Package: (null) OS Release: Fedora release 17 (Beefy Miracle) I turned on my HP printer after starting and logging into the computer. It seems this should be acceptable, though of course cups may be trying to do something it does not need to do, rather than selinux failing to allow something that should be done. Package: (null) OS Release: Fedora release 17 (Beefy Miracle) hplip-3.12.10-4.a.fc16 has been pushed to the Fedora 16 stable repository. If problems still persist, please make note of it in this bug report. *** Bug 881032 has been marked as a duplicate of this bug. *** |