Bug 1395801 - SELinux prevents cups-browsed from creating tmp files
Summary: SELinux prevents cups-browsed from creating tmp files
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Lukas Vrabec
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-11-16 17:36 UTC by Orion Poplawski
Modified: 2019-06-14 11:31 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-12-16 23:46:00 UTC
Type: Bug

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Orion Poplawski 2016-11-16 17:36:08 UTC 
Description of problem:

Nov 16 10:31:49 vmrawhide.cora.nwra.com audit[1409]: AVC avc:  denied  { create } for  pid=1409 comm="cups-browsed" name="582c9805cbe08" scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tmp_t:s0 tclass=lnk_file permissive=1
Nov 16 10:31:50 vmrawhide.cora.nwra.com audit[1409]: AVC avc:  denied  { unlink } for  pid=1409 comm="cups-browsed" name="582c9805cbe08" dev="tmpfs" ino=2797014 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tmp_t:s0 tclass=lnk_file permissive=1

Version-Release number of selected component (if applicable):
selinux-policy-3.13.1-225.fc26.noarch
Comment 1 Simon Sekidde 2016-12-16 15:47:29 UTC 
The correct label would be cupsd_tmp_t. Do you have the full path to the file/directory?

 find / -inum 2797014
Comment 2 Orion Poplawski 2016-12-16 23:46:00 UTC 
I no longer see this with:

selinux-policy-3.13.1-231.fc26.noarch
cups-filters-1.13.0-1.fc26.x86_64
Note You need to log in before you can comment on or make changes to this bug.