Red Hat Bugzilla – Bug 210542
CUPS doesn't work in MLS Enforcing mode
Last modified: 2007-11-30 17:11:45 EST
Description of problem:
The current CUPS code attempts to set the spool files to a ranged MLS label,
which is not allowed in Enforcing mode
Version-Release number of selected component (if applicable):
Please update to the attached patch, which sets the spool files to the
sensitivity level of the client's context.
Created attachment 138361 [details]
Updated cups-lspp.patch which sets spool file context correctly
Created attachment 138363 [details]
Incremental patch versus patch id=137751
This patch shows just the changes between patch 138361 and patch 137751 which
was included in cups-1.2.4-9
Created attachment 138615 [details]
Updated patch that removes INFO log messages
This updated patch removes INFO log messages as requested.
It also fixes a minor SELinux issue pointed out by Chris PeBenito, when
determining if a job can access the printer the access check needs to be on
CHR_FILE__WRITE to match the char device (/dev/lp0) of the printer, not the
Fixed in CVS for FC6.
1.2.5-2.fc6.1 built and ready to go into updates-testing once FC6 is actually
Fixed in update: cups-1.2.5-2.fc6.8