Description of problem: When printing text files, I get an AVC about the program texttopaps running in the cupsd_t domain trying to access font cache files with the fonts_cache_t type. As the domain has the right to access those files in other ways, it seems to make sense to allow it to memory map the files for reading too. Version-Release number of selected component (if applicable): selinux-policy-targeted-3.13.1-283.17.fc27.noarch paps-0.6.8-39.fc27.x86_64 How reproducible: Every time. Steps to Reproduce: 1. lpr /etc/system-release Actual results: An AVC. (The file is still printed.) Expected results: No AVC. Additional info: Detailed AVC: time->Tue Dec 5 21:31:55 2017 type=AVC msg=audit(1512505915.172:67324): avc: denied { map } for pid=20830 comm="texttopaps" path="/var/cache/fontconfig/3ad840390a44011d5fc042cdf95ddcfe-le64.cache-7" dev="dm-0" ino=5309664 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:fonts_cache_t:s0 tclass=file permissive=0
selinux-policy-3.13.1-283.18.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-8225c4e502
selinux-policy-3.13.1-283.18.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-8225c4e502
selinux-policy-3.13.1-283.19.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-8225c4e502
selinux-policy-3.13.1-283.19.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-8225c4e502
selinux-policy-3.13.1-283.19.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report.