Updated F8T2 - SELinux is preventing python (cupsd_config_t) "search" to hp (hplip_etc_t)

[Tim Waugh]

On Tue, 2007-09-18 at 05:48 -0700, Jim Hayward wrote:
> avc: denied { search } for comm=python dev=sda2 name=hp pid=3414
> scontext=system_u:system_r:cupsd_config_t:s0 tclass=dir
> tcontext=system_u:object_r:hplip_etc_t:s0

This is from /usr/lib/cups/backend/hpfax, a Python program that is part
of hplip.  It is quite normal for it to want to read files in /etc/hp,
so the policy needs to be updated to allow this syscall through.

allow cupsd_config_t hplip_etc_t:dir search;

(not sure if there is a macro that needs to be used for that..)

Tim.
*/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-test-list/attachments/20070918/37d47cf1/attachment.sig>