Zusammenfassung:

SELinux is preventing /usr/libexec/cups-pk-helper-mechanism "connectto" access
on /var/run/cups/cups.sock.

Detaillierte Beschreibung:

[cups-pk-helper- hat einen toleranten Typ (cupsd_config_t). Dieser Zugriff wurde
nicht verweigert.]

SELinux denied access requested by cups-pk-helper-. It is not expected that this
access is required by cups-pk-helper- and this access may signal an intrusion
attempt. It is also possible that the specific version or configuration of the
application is causing it to require additional access.

Zugriff erlauben:

You can generate a local policy module to allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Please file a bug
report.

Zusätzliche Informationen:

Quellkontext                  system_u:system_r:cupsd_config_t:s0-s0:c0.c1023
Zielkontext                   unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1
                              023
Zielobjekte                   /var/run/cups/cups.sock [ unix_stream_socket ]
Quelle                        cups-pk-helper-
Quellen-Pfad                  /usr/libexec/cups-pk-helper-mechanism
Port                          <Unbekannt>
Host                          (removed)
Quellen-RPM-Pakete            cups-pk-helper-0.0.4-7.fc12
Ziel-RPM-Pakete               
RPM-Richtlinie                selinux-policy-3.6.32-46.fc12
SELinux aktiviert             True
Richtlinienversion            targeted
Enforcing-Modus               Enforcing
Plugin-Name                   catchall
Hostname                      (removed)
Plattform                     Linux (removed) 2.6.31.5-127.fc12.x86_64 #1 SMP Sat
                              Nov 7 21:11:14 EST 2009 x86_64 x86_64
Anzahl der Alarme             1
Zuerst gesehen                So 29 Nov 2009 20:53:28 CET
Zuletzt gesehen               So 29 Nov 2009 20:53:28 CET
Lokale ID                     26b33222-79bf-406a-a17b-00a8eabad706
Zeilennummern                 

Raw-Audit-Meldungen           

node=(removed) type=AVC msg=audit(1259524408.543:31): avc:  denied  { connectto } for  pid=2282 comm="cups-pk-helper-" path="/var/run/cups/cups.sock" scontext=system_u:system_r:cupsd_config_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=unix_stream_socket

node=(removed) type=SYSCALL msg=audit(1259524408.543:31): arch=c000003e syscall=42 success=yes exit=128 a0=8 a1=1ace0c8 a2=1a a3=7fff2fd9b1a0 items=0 ppid=1 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cups-pk-helper-" exe="/usr/libexec/cups-pk-helper-mechanism" subj=system_u:system_r:cupsd_config_t:s0-s0:c0.c1023 key=(null)



Hash String generated from  selinux-policy-3.6.32-46.fc12,catchall,cups-pk-helper-,cupsd_config_t,unconfined_t,unix_stream_socket,connectto
audit2allow suggests:

#============= cupsd_config_t ==============
allow cupsd_config_t unconfined_t:unix_stream_socket connectto;