Description of problem: The current CUPS code attempts to set the spool files to a ranged MLS label, which is not allowed in Enforcing mode Version-Release number of selected component (if applicable): 1.2.4-9 How reproducible: Every Time. Please update to the attached patch, which sets the spool files to the sensitivity level of the client's context.
Created attachment 138361 [details] Updated cups-lspp.patch which sets spool file context correctly
Created attachment 138363 [details] Incremental patch versus patch id=137751 This patch shows just the changes between patch 138361 and patch 137751 which was included in cups-1.2.4-9
Created attachment 138615 [details] Updated patch that removes INFO log messages This updated patch removes INFO log messages as requested. It also fixes a minor SELinux issue pointed out by Chris PeBenito, when determining if a job can access the printer the access check needs to be on CHR_FILE__WRITE to match the char device (/dev/lp0) of the printer, not the generic FILE__WRITE.
Fixed in CVS for FC6.
1.2.5-2.fc6.1 built and ready to go into updates-testing once FC6 is actually released.
Fixed in update: cups-1.2.5-2.fc6.8