FC8: selinux stops cupsd from starting

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Matt Thompson wrote:
> I am having a problem with cupsd on my FC8 box.  Namely, it only seems
> to want to start on reboot.  If I try to start it later I get:
> 
> # service cups start
> Starting cups: /bin/bash: /usr/sbin/cupsd: Permission denied
>                                                            [FAILED]
> 
> and then audit.log sayeth:
> type=SELINUX_ERR msg=audit(1197478409.420:673): security_compute_sid:
> invalid context user_u:system_r:cupsd_t:s0-s0:c0.c1023 for
> scontext=user_u:system_r:initrc_t:s0
> tcontext=system_u:object_r:cupsd_exec_t:s0 tclass=process
> 
> This seems to be the same bug as in #390391:
> https://bugzilla.redhat.com/show_bug.cgi?id=390391
> 
> but none of the fixes in that seemed to work.
> 
> More detail can be found at the bug, but I thought I'd ask here in case
> the answer was well known and my bugzilla-search-fu was lacking.
> 
> Thanks for any help,
> Matt Thompson
> 
That bug was resolved.  Policy 68 should correct the default file
context for the administrator, which will allow them to start and stop
the service.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFHYaGmrlYvE4MpobMRAspSAKCEQpSDZIuKukX0zkbQXmzNup6eegCffin0
X+VCPNUMtGFDX+QT4nkzwPQ=
=tE7v
-----END PGP SIGNATURE-----