selinux denying a cups printer

Gene Heskett gene.heskett at verizon.net
Fri Nov 28 17:06:31 UTC 2008


Greetings;

Uptodate F8, targeted setting

host=coyote.coyote.den type=AVC msg=audit(1227891049.940:679): avc: denied { 
execute } for pid=6486 comm="cupsd" name="lp3" dev=sda3 ino=104400725 
scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 
tcontext=system_u:object_r:cupsd_rw_etc_t:s0 tclass=file

host=coyote.coyote.den type=SYSCALL msg=audit(1227891049.940:679): 
arch=40000003 syscall=33 success=no exit=-13 a0=bff13656 a1=1 a2=b7f17ff4 
a3=b7f18a3c items=0 ppid=6485 pid=6486 auid=0 uid=0 gid=0 euid=0 suid=0 
fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="cupsd" 
exe="/usr/sbin/cupsd" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 
key=(null)

The troubleshooters recommended fix is a restorecon -v './lp3'

The only ./lp3 I could find was in /etc/cups.d/interfaces/lp3, and while it 
did change the context of the file, it does not fix the problem.  This 
particular driver ppd is the lpr and cupswrapper of the HL2140 driver kit 
from Brother, and apparently is installed in a /usr/local/Brother subdir by 
their rpms.

All this did work flawlessly before I had a drive failure, and it worked after 
an Fu8 install, but failed sometime in the nearly 2 weeks uptime, as did all 
my other printer profiles, which I have now deleted and rebuilt, and work 
except for this one.

I am going to try touching /.autorelabel and reboot again see if that helps.  
However, nothing happened the last time I tried that 2 weeks ago...

-- 
Cheers, Gene
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Q:	How many IBM CPU's does it take to do a logical right shift?
A:	33.  1 to hold the bits and 32 to push the register.




More information about the fedora-selinux-list mailing list