Bug 129025 - cups writes /usr/share/printconf/util/backend.pyo, fails if /usr/share is not writable
cups writes /usr/share/printconf/util/backend.pyo, fails if /usr/share is not...
Status: CLOSED RAWHIDE
Product: Fedora
Classification: Fedora
Component: system-config-printer (Show other bugs)
rawhide
i686 Linux
medium Severity medium
: ---
: ---
Assigned To: Tim Waugh
:
Depends On:
Blocks: FC4Target
  Show dependency treegraph
 
Reported: 2004-08-03 01:33 EDT by Tom London
Modified: 2007-11-30 17:10 EST (History)
3 users (show)

See Also:
Fixed In Version: 0.6.134-1
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2005-06-16 12:36:23 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Tom London 2004-08-03 01:33:33 EDT
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7) Gecko/20040625

Description of problem:
cups appears to open /usr/share/printconf/util/backend.pyo for writing.

This fails if /usr/share/.... is not writable, or if running with
strict SELinux policy.

Perhaps making /usr/share/printconf/util/backend.pyo a symlink
(say, to /etc/cups/backend.pyo)......

Version-Release number of selected component (if applicable):
cups-1.1.21-1.rc1.5

How reproducible:
Always

Steps to Reproduce:
1. boot system with USB printer (say, HP 950PSC), and /usr/share
read-only, or with SELinux strict/enforcing
2. 
3.
    

Additional info:
Comment 1 Tim Waugh 2004-08-03 04:13:55 EDT
Fixing component.
Comment 2 Tim Waugh 2004-08-03 04:16:13 EDT
Apps that ship Python code should also ship the .pyo/.pyc bits IMHO --
but apparently this is not trivial to do correctly.  CC'ing Python
maintainer for further input.

As far as SELinux goes (and I think this is what prompted this bug
report) these should be dontaudit, and I thought they were at one point.
Comment 3 Tom London 2004-08-03 10:23:57 EDT
dontaudit would remove the avc's, but the write of the file would fail.

That would be OK if the the .pyo is never used, but then ....

thanks
Comment 4 Tim Waugh 2004-08-03 10:31:47 EDT
The .pyo file is just to speed up loading of the Python module -- it
is for optimization, which in this case is lost in the noise of having
to load the foomatic database later on.
Comment 5 Tim Waugh 2004-12-22 10:56:30 EST
Waiting for redhat-rpm-config to turn on the Python pre-compilation.
Comment 6 Tim Waugh 2005-03-17 11:53:36 EST
(Reassigning.)
Comment 7 Elliot Lee 2005-03-21 23:43:21 EST
Tim - if you'll tell me what changes to make, I can do that, or feel free to
just check in the necessary changes yourself.
Comment 8 Tim Waugh 2005-03-22 06:36:48 EST
/usr/lib/rpm/brp-python-bytecompile needs to get run in
/usr/lib/rpm/redhat/brp-redhat.
Comment 9 Elliot Lee 2005-04-06 23:18:09 EDT
Enabled in redhat-rpm-config CVS, it'll wind up in the dist sooner
Comment 10 Tim Waugh 2005-04-18 09:55:39 EDT
Please build this.  Thanks.

Note You need to log in before you can comment on or make changes to this bug.