Sommario:

SELinux is preventing the cupsd from using potentially mislabeled files
(HP-LaserJet-1018.ppd).

Descrizione dettagliata:

SELinux has denied cupsd access to potentially mislabeled file(s)
(HP-LaserJet-1018.ppd). This means that SELinux will not allow cupsd to use
these files. It is common for users to edit files in their home directory or tmp
directories and then move (mv) them to system directories. The problem is that
the files end up with the wrong file context which confined applications are not
allowed to access.

Abilitazione accesso in corso:

If you want cupsd to access this files, you need to relabel them using
restorecon -v 'HP-LaserJet-1018.ppd'. You might want to relabel the entire
directory using restorecon -R -v ''.

Informazioni aggiuntive:

Contesto della sorgente       unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023
Contesto target               system_u:object_r:tmp_t:s0
Oggetti target                HP-LaserJet-1018.ppd [ file ]
Sorgente                      cupsd
Percorso della sorgente       /usr/sbin/cupsd
Porta                         <Sconosciuto>
Host                          (removed)
Sorgente Pacchetti RPM        cups-1.4-0.b2.18.fc11
Pacchetti RPM target          
RPM della policy              selinux-policy-3.6.12-53.fc11
Selinux abilitato             True
Tipo di policy                targeted
Modalità Enforcing           Enforcing
Nome plugin                   home_tmp_bad_labels
Host Name                     (removed)
Piattaforma                   Linux localhost.localdomain
                              2.6.29.5-191.fc11.i686.PAE #1 SMP Tue Jun 16
                              23:19:53 EDT 2009 i686 i686
Conteggio avvisi              2
Primo visto                   dom 28 giu 2009 12:08:02 CEST
Ultimo visto                  dom 28 giu 2009 12:08:07 CEST
ID locale                     00967d4e-3bed-4360-840c-7563517af533
Numeri di linea               

Messaggi Raw Audit            

node=localhost.localdomain type=AVC msg=audit(1246183687.370:48): avc:  denied  { write } for  pid=3525 comm="cupsd" name="HP-LaserJet-1018.ppd" dev=dm-0 ino=122531 scontext=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tmp_t:s0 tclass=file

node=localhost.localdomain type=SYSCALL msg=audit(1246183687.370:48): arch=40000003 syscall=5 success=no exit=-13 a0=bf7f9bea a1=8241 a2=1b6 a3=88009a items=0 ppid=1 pid=3525 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="cupsd" exe="/usr/sbin/cupsd" subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)



Hash String generated from  selinux-policy-3.6.12-53.fc11,home_tmp_bad_labels,cupsd,cupsd_t,tmp_t,file,write
audit2allow suggests:

#============= cupsd_t ==============
allow cupsd_t tmp_t:file write;