Bug 184103 - hplip policy addition
Summary: hplip policy addition
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted
Version: rawhide
Hardware: All
OS: Linux
medium
low
Target Milestone: ---
Assignee: Russell Coker
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-03-06 10:26 UTC by Tim Waugh
Modified: 2007-11-30 22:11 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2006-03-10 12:42:05 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Tim Waugh 2006-03-06 10:26:49 UTC
Description of problem:
We ought to add this for HPLIP, so that it can communicate more efficiently with
CUPS-1.2, and to avoid noise in audit.log:

allow hplip_t cupsd_t:unix_stream_socket connectto;
allow hplip_t cupsd_var_run_t:dir search;
allow hplip_t cupsd_var_run_t:sock_file write;

Version-Release number of selected component (if applicable):
2.2.23-3

How reproducible:
100%

Steps to Reproduce:
1. Install CUPS-1.2 (packages in dist-fc5-scratch)
2. Configure a printer driven by hplip
3. setenforce 0
4. Print to it
5. Examine audit.log

Additional info:
There aren't really any particularly bad symptoms of not adding this policy, but
we ought to do that sometime.

Comment 1 Daniel Walsh 2006-03-06 17:23:06 UTC
Fixed in 2.2.23-4




Note You need to log in before you can comment on or make changes to this bug.