cups AVC...

[Tim Waugh]

On Fri, 2007-07-20 at 07:04 -0700, Tom London wrote:
> Seem to be getting this one from cups.  Haven't seen 'anon_inodefs' before....
> 
> Printing to HP5MP seems to work however....
> 
> tom
> 
> type=AVC msg=audit(1184938825.408:32): avc:  denied  { ioctl } for
> pid=5296 comm="cupsd" name="[eventpoll]" dev=anon_inodefs ino=385
> scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023
> tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
> type=SYSCALL msg=audit(1184938825.408:32): arch=40000003 syscall=54
> success=no exit=-13 a0=1 a1=5401 a2=bfda72ac a3=bfda73cc items=0
> ppid=5295 pid=5296 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
> sgid=0 fsgid=0 tty=(none) comm="cupsd" exe="/usr/sbin/cupsd"
> subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
> type=AVC_PATH msg=audit(1184938825.408:32):  path="anon_inode:[eventpoll]"


Yes, this seems to have started happening since it started to link
against avahi-compat-libdns_sd.  I don't know quite why -- the policy
should say it can talk to avahi.

Tim.
*/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20070720/652f583d/attachment.sig>