Bug 786208 - Policy stopping cups-lpd network connection
Summary: Policy stopping cups-lpd network connection
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted
Version: 16
Hardware: All
OS: Linux
unspecified
low
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Ben Levenson
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-01-31 17:54 UTC by fedora.dm0
Modified: 2012-02-02 17:24 UTC (History)
1 user (show)

Fixed In Version: selinux-policy-3.10.0-75.fc16
Clone Of:
Environment:
Last Closed: 2012-02-01 19:38:49 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description fedora.dm0 2012-01-31 17:54:57 UTC
Description of problem:
After configuring a relatively standard LPD server with cups-lpd, jobs were not being received due to name_connect AVC messages (cupsd_lpd_t not allowed to connect to printer_port_t).

Version-Release number of selected component (if applicable):
3.10.0-72.fc16 (fully updated Fedora 16)

How reproducible:
Try to print something over LPD to a standard install of cups-lpd.

Actual results:
Print job doesn't appear to be received.

Expected results:
Print job should be received and print properly.

Additional info:
I was able to correct this by adding the following line to one of my local policy modules:
corenet_tcp_connect_printer_port(cupsd_lpd_t)

Comment 1 Daniel Walsh 2012-01-31 19:28:35 UTC
Seems like something we should allow.

Comment 2 Miroslav Grepl 2012-02-01 08:45:04 UTC
Fixed in selinux-policy-3.10.0-75.fc16

Comment 3 Fedora Update System 2012-02-01 13:18:52 UTC
selinux-policy-3.10.0-75.fc16 has been submitted as an update for Fedora 16.
https://admin.fedoraproject.org/updates/selinux-policy-3.10.0-75.fc16

Comment 4 Fedora Update System 2012-02-01 19:25:51 UTC
Package selinux-policy-3.10.0-75.fc16:
* should fix your issue,
* was pushed to the Fedora 16 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing selinux-policy-3.10.0-75.fc16'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-1133/selinux-policy-3.10.0-75.fc16
then log in and leave karma (feedback).

Comment 5 fedora.dm0 2012-02-01 19:38:49 UTC
I left positive karma on the package this morning, after running it for a few hours.  It fixes the issue, so this report can now be closed.  Thanks.

Comment 6 Miroslav Grepl 2012-02-02 07:33:35 UTC
Could you update karma?

Comment 7 Fedora Update System 2012-02-02 17:24:55 UTC
selinux-policy-3.10.0-75.fc16 has been pushed to the Fedora 16 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.