on startup.. type=AVC msg=audit(1145584029.314:7): avc: denied { setattr } for pid=2669 comm="cupsd" name="cups" dev=dm-0 ino=10453024 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c255 tcontext=user_u:object_r:var_run_t:s0 tclass=dir
Similar but a bit different here: type=AVC msg=audit(1145879719.492:48): avc: denied { getattr } for pid=3377 comm="sh" name="audit" dev=sda1 ino=589290 scontext=root:system_r:cupsd_t tcontex t=system_u:object_r:auditd_log_t tclass=dir libselinux-1.23.11-1.1, selinux-policy-targeted-1.27.1-2.28, cups-1.1.23-15.4 Did an autorelabel on the filesystem, didn't help. setsebool -P cupsd_disable_trans 1 makes the AVC error go away, but is a pretty blunt instrument.
First on is a labeling problem. restorecon -R -v /var/run/cups Any idea how it got mislabled? On the second, Disabling cups should not be done. I know of no reason why cups would getattr on the auditlog???
no idea how it got mislabelled. This box got installed with FC5 a few weeks back, and updated to rawhide a few days after FC5-GA. I've never booted this install with selinux=0, and I don't recall even running setenforce on this box in the last few weeks.
Tim does this directory get created outside of the RPM ? Dan
Oops, the only reference to this directory in the file manifest is this: %dir %attr(0511,lp,sys) /var/run/cups/certs I'll add this before it: %dir %attr(0755,root,lp) /var/run/cups
Fixed in CVS.
Fixed in 1.2.0-1.1.