Description of problem: Setting up printing via samba causes selinux to prevent the lpr and lpq jobs from being executed. I will attach the alert selinux gives for lpq - the lpd alert is available on "request" but is 95% similar. I have also enabled EVERYTHING related to samba and cups in the "SELinux Administration" application. Only work around I have found is to set SELinux policy to permissive... which seems "borken". Version-Release number of selected component (if applicable): [riishigh@kosh]~/Desktop% rpm -qa | grep selinux libselinux-2.0.13-1.fc7 selinux-policy-targeted-2.6.4-8.fc7 libselinux-devel-2.0.13-1.fc7 selinux-policy-2.6.4-8.fc7 libselinux-2.0.13-1.fc7 libselinux-python-2.0.13-1.fc7 libselinux-devel-2.0.13-1.fc7 [riishigh@kosh]~/Desktop% rpm -qa | grep samba samba-3.0.25-2.fc system-config-samba-1.2.41-1.fc7 samba-common-3.0.25-2.fc7 samba-client-3.0.25-2.fc7 How reproducible: Installed Fedora 7 and updated to latest using "pup". Added a printer and setup samba. Started samba and tried printing from my wifes windows box. Actual results: SELinux alert Expected results: A page on the printer.
Created attachment 156291 [details] SELinux message saved from "setroubleshoot browser"
Why is lpq.cups labeled samba_share_t?
I will add the ability for samba to execute lpr in selinux-policy-2.6.4-14