Bug 866716
Summary: | SELinux is preventing /usr/bin/brprintconf_mfcj6910dw from 'write' accesses on the directory /etc/opt/brother/Printers/mfcj6910dw/inf. | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | John Griffiths <fedora.jrg01> | ||||||
Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> | ||||||
Status: | CLOSED CURRENTRELEASE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
Severity: | unspecified | Docs Contact: | |||||||
Priority: | unspecified | ||||||||
Version: | 17 | CC: | dominick.grift, dwalsh, mgrepl | ||||||
Target Milestone: | --- | Keywords: | Reopened | ||||||
Target Release: | --- | ||||||||
Hardware: | i686 | ||||||||
OS: | Unspecified | ||||||||
Whiteboard: | abrt_hash:a0c17e6fdeb9d5620601459946ba939489f36f6b853bfa955944929a01c895c4 | ||||||||
Fixed In Version: | Doc Type: | Bug Fix | |||||||
Doc Text: | Story Points: | --- | |||||||
Clone Of: | Environment: | ||||||||
Last Closed: | 2013-01-07 03:59:51 UTC | Type: | --- | ||||||
Regression: | --- | Mount Type: | --- | ||||||
Documentation: | --- | CRM: | |||||||
Verified Versions: | Category: | --- | |||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||
Embargoed: | |||||||||
Attachments: |
|
Description
John Griffiths
2012-10-16 00:43:42 UTC
Created attachment 627822 [details]
File: type
Created attachment 627823 [details]
File: hashmarkername
You will need to fix labeling for brprintconf_mfc. # restorecon -R -v PATHO/brprintconf_mfc This install must be creating files in /etc and then mv it to matchpathcon /etc/opt/brother/Printers/mfcj6910dw/inf /etc/opt/brother/Printers/mfcj6910dw/inf system_u:object_r:etc_t:s0 You are right. I missed this is /etc/opt/.. We have matchpathcon /opt/brother/Printers/mfcj6910dw/inf /opt/brother/Printers/mfcj6910dw/inf system_u:object_r:cupsd_rw_etc_t:s0 Why is it located in the /etc/opt/brother instead of /opt/brother? The inf directory is only in /etc/opt/brother/Printers/mfcj6910dw/. The /opt/brother/Printers/mfcj6910dw/ directory contains two directories, cupswrapper and lpd. The "why" would have to be directed to Brother. All I did was install the Brother rpm packages. Maybe they have moved it. ok, what does rpm -qf /etc/opt/brother rpm -qf /etc/opt/brother file /etc/opt/brother is not owned by any package This was a fresh install of Fedora 17. brmfcfaxlpd-1.0.0-1.i386.rpm brmfcfaxcups-1.0.0-1.i386.rpm brscan-skey-0.2.1-3.i386.rpm brscan4-0.3.0-2.i386.rpm mfcj6910dwlpr-1.1.1-1.i386.rpm mfcj6910dwcupswrapper-1.1.1-1.i386.rpm are the Brother rpm packages installed. Added labeling. selinux-policy-3.10.0-165.fc17 has been submitted as an update for Fedora 17. https://admin.fedoraproject.org/updates/selinux-policy-3.10.0-165.fc17 Package selinux-policy-3.10.0-165.fc17: * should fix your issue, * was pushed to the Fedora 17 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.10.0-165.fc17' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-20544/selinux-policy-3.10.0-165.fc17 then log in and leave karma (feedback). Package selinux-policy-3.10.0-166.fc17: * should fix your issue, * was pushed to the Fedora 17 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.10.0-166.fc17' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-20544/selinux-policy-3.10.0-166.fc17 then log in and leave karma (feedback). selinux-policy-3.10.0-166.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report. |