Summary: SELinux is preventing /usr/bin/python "write" access on prnt. Detailed Description: SELinux denied access requested by python. It is not expected that this access is required by python and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access: You can generate a local policy module to allow this access - see FAQ (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Please file a bug report. Additional Information: Source Context system_u:system_r:hplip_t:s0-s0:c0.c1023 Target Context system_u:object_r:usr_t:s0 Target Objects prnt [ dir ] Source python Source Path /usr/bin/python Port <Unknown> Host (removed) Source RPM Packages python-2.6.2-2.fc12 Target RPM Packages Policy RPM selinux-policy-3.6.32-41.fc12 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name catchall Host Name (removed) Platform Linux (removed) 2.6.31.5-127.fc12.i686 #1 SMP Sat Nov 7 21:41:45 EST 2009 i686 i686 Alert Count 8 First Seen Wed 18 Nov 2009 05:41:55 PM EET Last Seen Wed 18 Nov 2009 05:48:41 PM EET Local ID 68c83f6f-ac37-4169-95f1-74effe2f48e2 Line Numbers Raw Audit Messages node=(removed) type=AVC msg=audit(1258559321.117:26213): avc: denied { write } for pid=17504 comm="python" name="prnt" dev=dm-0 ino=335932 scontext=system_u:system_r:hplip_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=dir node=(removed) type=SYSCALL msg=audit(1258559321.117:26213): arch=40000003 syscall=10 success=no exit=-13 a0=bff8271b a1=96853e0 a2=45f1868 a3=bff8377b items=0 ppid=17498 pid=17504 auid=4294967295 uid=0 gid=7 euid=0 suid=0 fsuid=0 egid=7 sgid=7 fsgid=7 tty=(none) ses=4294967295 comm="python" exe="/usr/bin/python" subj=system_u:system_r:hplip_t:s0-s0:c0.c1023 key=(null) Hash String generated from selinux-policy-3.6.32-41.fc12,catchall,python,hplip_t,usr_t,dir,write audit2allow suggests: #============= hplip_t ============== allow hplip_t usr_t:dir write;
restorecon -R -v /usr/share/hplip Should fix. Tim is /usr/share/hplip/prnt in a package we ship?
Yes it's in the hplip package. But hp-setup (presumably that's what is causing the problem?) shouldn't write there. It sounds like one of the Python files has been modified and python is trying to rebuild a .pyo or .pyc file there. We already ship correct .pyo and .pyc files. Svetoslav: what were you doing at the time, and had you modified any files there?
Unless it is trying to create the plugins directory?
Yes, that's probably it. I'll switch the component to hplip to investigate what needs to be changed to get it to work.
*** Bug 545655 has been marked as a duplicate of this bug. ***
*** This bug has been marked as a duplicate of bug 564551 ***