Bug 1196183 - SELinux is preventing udev-add-printe from 'write' accesses on the file /usr/lib/python3.4/site-packages/urllib3/packages/__pycache__/six.cpython-34.pyc.140222077716912.
Summary: SELinux is preventing udev-add-printe from 'write' accesses on the file /usr/...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: system-config-printer
Version: 21
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Tim Waugh
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:32e1425343d6b1e05a519e775d1...
: 1200319 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-02-25 12:50 UTC by igor
Modified: 2015-04-26 12:47 UTC (History)
15 users (show)

Fixed In Version: system-config-printer-1.5.6-1.fc21
Clone Of:
Environment:
Last Closed: 2015-03-21 05:03:03 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description igor 2015-02-25 12:50:28 UTC
Description of problem:
SELinux is preventing udev-add-printe from 'write' accesses on the file /usr/lib/python3.4/site-packages/urllib3/packages/__pycache__/six.cpython-34.pyc.140222077716912.

*****  Plugin catchall (100. confidence) suggests   **************************

If якщо ви вважаєте, що udev-add-printe має бути надано типовий доступ write до six.cpython-34.pyc.140222077716912 file.
Then вам слід повідомити про цю помилку як про ваду.
Ви можете створити модуль локальних правил для надання подібного доступу.
Do
надайте доступ за допомогою команд:
# grep udev-add-printe /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                system_u:system_r:cupsd_config_t:s0
Target Context                system_u:object_r:lib_t:s0
Target Objects                /usr/lib/python3.4/site-packages/urllib3/packages/
                              __pycache__/six.cpython-34.pyc.140222077716912 [
                              file ]
Source                        udev-add-printe
Source Path                   udev-add-printe
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           
Target RPM Packages           
Policy RPM                    selinux-policy-3.13.1-105.3.fc21.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 3.18.7-200.fc21.x86_64 #1 SMP Wed
                              Feb 11 21:53:17 UTC 2015 x86_64 x86_64
Alert Count                   2
First Seen                    2015-02-23 21:10:41 EET
Last Seen                     2015-02-23 21:30:27 EET
Local ID                      2a04a929-2bf8-4143-b01f-03bffd56d7c0

Raw Audit Messages
type=AVC msg=audit(1424719827.520:510): avc:  denied  { write } for  pid=2934 comm="udev-add-printe" path="/usr/lib/python3.4/site-packages/urllib3/packages/__pycache__/six.cpython-34.pyc.140222077716912" dev="dm-3" ino=662025 scontext=system_u:system_r:cupsd_config_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file permissive=0


Hash: udev-add-printe,cupsd_config_t,lib_t,file,write

Version-Release number of selected component:
selinux-policy-3.13.1-105.3.fc21.noarch

Additional info:
reporter:       libreport-2.3.0
hashmarkername: setroubleshoot
kernel:         3.18.7-200.fc21.x86_64
type:           libreport

Comment 1 Lukas Vrabec 2015-02-25 19:31:40 UTC
Does anyone know whats going on here?
Why udev-add-printe writing to that file?

Comment 3 Tim Waugh 2015-03-10 10:46:27 UTC
*** Bug 1200319 has been marked as a duplicate of this bug. ***

Comment 4 Fedora Update System 2015-03-17 17:51:50 UTC
system-config-printer-1.5.6-1.fc22 has been submitted as an update for Fedora 22.
https://admin.fedoraproject.org/updates/system-config-printer-1.5.6-1.fc22

Comment 5 Fedora Update System 2015-03-17 17:53:38 UTC
system-config-printer-1.5.6-1.fc21 has been submitted as an update for Fedora 21.
https://admin.fedoraproject.org/updates/system-config-printer-1.5.6-1.fc21

Comment 6 Fedora Update System 2015-03-18 10:21:55 UTC
Package system-config-printer-1.5.6-1.fc21:
* should fix your issue,
* was pushed to the Fedora 21 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing system-config-printer-1.5.6-1.fc21'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2015-4027/system-config-printer-1.5.6-1.fc21
then log in and leave karma (feedback).

Comment 7 Fedora Update System 2015-03-21 05:03:03 UTC
system-config-printer-1.5.6-1.fc22 has been pushed to the Fedora 22 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 8 Bryan Mena Suarez 2015-03-23 01:23:45 UTC
Description of problem:
I don't remember how the problem appears. But suddenly I saw the notification problem.

Version-Release number of selected component:
selinux-policy-3.13.1-105.6.fc21.noarch

Additional info:
reporter:       libreport-2.3.0
hashmarkername: setroubleshoot
kernel:         3.18.9-200.fc21.x86_64
type:           libreport

Comment 9 Alex Puchades 2015-04-18 16:07:30 UTC
Description of problem:
A SELinux alert appeared while adding my HP LaserJet Pro P1102 printer.
How reproducible: whenever I remove and add the printer again.

Version-Release number of selected component:
selinux-policy-3.13.1-105.11.fc21.noarch

Additional info:
reporter:       libreport-2.3.0
hashmarkername: setroubleshoot
kernel:         3.19.3-200.fc21.x86_64
type:           libreport

Comment 10 Alex Puchades 2015-04-18 16:10:52 UTC
Ok, the last report was sent by SETroubleshoot and I didn't read the other comments till the report was already sent. Sorry for the inconvenience.

Comment 11 123 2015-04-22 11:58:16 UTC
Description of problem:
I connected a printer (HP Laserjet 3020) in my system. 

Version-Release number of selected component:
selinux-policy-3.13.1-105.11.fc21.noarch

Additional info:
reporter:       libreport-2.3.0
hashmarkername: setroubleshoot
kernel:         3.19.4-200.hu.1.uksm.bfs.bfq.fc21.x86_64
type:           libreport

Comment 12 Fedora Update System 2015-04-26 12:47:33 UTC
system-config-printer-1.5.6-1.fc21 has been pushed to the Fedora 21 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.