Description of problem: /etc/cups/subscriptions.conf* needs to get context cupsd_rw_etc_t. Currently it gets cupsd_etc_t. When CUPS gets an IPP request to create a subscription, cupsd needs to write to /etc/cups/subscriptions.conf to make it persistent across restarts. Version-Release number of selected component (if applicable): selinux-policy-2.4.6-62.fc6 How reproducible: 100% Steps to Reproduce: /sbin/restorecon -v /etc/cups/subscriptions.conf* ls -Z /etc/cups/subscriptions.conf* Actual results: [root@cyberelk ~]# /sbin/restorecon -vR /etc/cups /sbin/restorecon reset /etc/cups/subscriptions.conf.O context system_u:object_r:cupsd_rw_etc_t:s0->system_u:object_r:cupsd_etc_t:s0 /sbin/restorecon reset /etc/cups/subscriptions.conf context system_u:object_r:cupsd_rw_etc_t:s0->system_u:object_r:cupsd_etc_t:s0 [root@cyberelk ~]# ls -Z /etc/cups/subscriptions.conf* -rw-r----- root lp system_u:object_r:cupsd_etc_t /etc/cups/subscriptions.conf -rw-r----- root lp system_u:object_r:cupsd_etc_t /etc/cups/subscriptions.conf.O
Fixed in selinux-policy-2.4.6-69
Fix confirmed; thanks.