12:03 a.m.
can anyone help me figure out what is going on here? I'll look at it in the
morning, but still might not find it on my own.
SELinux is preventing /usr/lib/cups/filter/hpcups from search access on the
directory /var/lib/hp.
***** Plugin catchall (100. confidence) suggests
***************************
If you believe that hpcups should be allowed search access on the hp
directory by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep hpcups /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp
Additional Information:
Source Context system_u:system_r:cupsd_t:s0-s0:c0.c1023
Target Context system_u:object_r:hplip_var_lib_t:s0
Target Objects /var/lib/hp [ dir ]
Source hpcups
Source Path /usr/lib/cups/filter/hpcups
Port <Unknown>
Host localhost.localdomain
Source RPM Packages hpijs-3.13.2-1.fc18.x86_64
Target RPM Packages hplip-3.13.2-1.fc18.x86_64
Policy RPM selinux-policy-3.11.1-71.fc18.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name localhost.localdomain
Platform Linux localhost.localdomain
3.7.2-204.fc18.x86_64
#1 SMP Wed Jan 16 16:22:52 UTC 2013 x86_64
x86_64
Alert Count 1
First Seen 2013-03-29 21:55:27 PDT
Last Seen 2013-03-29 21:55:27 PDT
Local ID 9063f3dd-5d16-4075-94d6-dde1b6741646
Raw Audit Messages
type=AVC msg=audit(1364619327.931:341): avc: denied { search } for
pid=2487 comm="hpcups" name="hp" dev="dm-2" ino=1582738
scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023
tcontext=system_u:object_r:hplip_var_lib_t:s0 tclass=dir
type=SYSCALL msg=audit(1364619327.931:341): arch=x86_64 syscall=open
success=no exit=EACCES a0=424c24 a1=0 a2=1b6 a3=238 items=0 ppid=806
pid=2487 auid=4294967295 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7
fsgid=7 ses=4294967295 tty=(none) comm=hpcups
exe=/usr/lib/cups/filter/hpcups
subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
Hash: hpcups,cupsd_t,hplip_var_lib_t,dir,search
audit2allow
#============= cupsd_t ==============
allow cupsd_t hplip_var_lib_t:dir search;
audit2allow -R
#============= cupsd_t ==============
allow cupsd_t hplip_var_lib_t:dir search;
Thanks for any help.
3:14 p.m.
On Mon, Apr 1, 2013 at 5:44 AM, Daniel J Walsh <dwalsh(a)redhat.com> wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 03/31/2013 06:27 PM, Ed Greshko wrote:
> On 04/01/13 03:30, Richard Vickery wrote:
>>
>> No. The file /etc/selinux/targeted/contexts/files/file_contexts is
>> provided by selinux-policy-targeted. cups and hplip are not mutually
>> exclusive.
>>
>> I just checked and earlier versions of the policy did have
>> hplip_var_lib....
>>
>> So....
>>
>> yum update selinux-policy-targeted
>>
>> Should correct that problem....
>>
>> Can you print with lpr using either -P or setting the default?
>>
>>
>> Installing the above and going to print now get an error in the form of
>> the following, forcing me to go back through emails to figure out how I
>> got in recently. If I can't get a bug report done today, the following
is
>> what I have just had returned:
>>
>> SELinux is preventing /usr/sbin/cupsd from using the 'transition'
>> accesses on a process.
>
> I would not bugzilla this or create a locale policy quite yet. One has
to
> consider that selinux is not HW sensitive. Also, this is basic system
> stuff that if one has installed via the normal means it is used by "lots"
> of people.....
>
> I would first do this.....
>
> [root@meimei ~]# ls -dZ /usr/sbin/cupsd -rwxr-xr-x. root root
> system_u:object_r:cupsd_exec_t:s0 /usr/sbin/cupsd
>
> [root@meimei ~]# ls -dZ /usr/lib/cups/notifier/dbus -rwxr-xr-x. root
root
> system_u:object_r:bin_t:s0 /usr/lib/cups/notifier/dbus
>
> I'm guessing one of these will not match the above.....
>
> I would then...
>
> [root@meimei ~]# yum check-update (to make sure no updates are
> pending...and update if there are)
>
> followed by
>
> [root@meimei ~]# touch /.autorelabel
>
> And then *reboot*. The boot process will take longer than normal....
>
> Then try again....
>
>
systemctl restart cups
Should fix your problem.
No need to relabel. The update plus restarting the service will fix it.
Now the printer clicks on to print a document, then, within a tenth, or a
hundredth, of a second, clicks as if printing were completed without
printing.
10:49 p.m.
On 04/02/13 11:03, Richard Vickery wrote:
On Mon, Apr 1, 2013 at 3:31 PM, Ed Greshko <Ed.Greshko(a)greshko.com
<mailto:Ed.Greshko@greshko.com>> wrote:
On 04/02/13 04:14, Richard Vickery wrote:
>
>
>
> Now the printer clicks on to print a document, then, within a tenth, or a
hundredth, of a second, clicks as if printing were completed without printing.
Go to....
http://localhost:631/printers/
Then click on the link for your printer.
Then click on the pull down menu for "Maintenance" and choose "Print
Test Page".
Then check /var/log/cups/error_log
--
From now on, at least during winter time, Im going to blame all spelling an grammar
erros on the cat sitting on my chest every time I sit down at the computer....
--
In going to ...printers/ I get an error page with the following:
Oops! Google Chrome could not connect to localhost:631
where it won't let me access the page; so then:
As root....
[root@meimei ~]# netstat -nap | grep cups
Also....
[root@meimei cups]# diff /etc/cups/cupsd.conf /etc/cups/cupsd.conf.default
And...
[root@meimei cups]# rpm -qa | grep ^cups
--
From now on, at least during winter time, Im going to blame all
spelling an grammar erros on the cat sitting on my chest every time I sit down at the
computer....
10:03 p.m.
On Mon, Apr 1, 2013 at 3:31 PM, Ed Greshko <Ed.Greshko(a)greshko.com> wrote:
On 04/02/13 04:14, Richard Vickery wrote:
>
>
>
> Now the printer clicks on to print a document, then, within a tenth, or
a hundredth, of a second, clicks as if printing were completed without
printing.
Go to....
http://localhost:631/printers/
Then click on the link for your printer.
Then click on the pull down menu for "Maintenance" and choose "Print Test
Page".
Then check /var/log/cups/error_log
--
From now on, at least during winter time, Im going to blame all spelling
an grammar erros on the cat sitting on my chest every time I sit down at
the computer....
--
In going to ...printers/ I get an error page with the following:
Oops! Google Chrome could not connect to localhost:631
where it won't let me access the page; so then:
]$ sudo cat /var/log/cups/error_log
W [31/Mar/2013:17:00:55 -0700] Duplicate listen address
"/var/run/cups/cups.sock" ignored.
E [31/Mar/2013:17:00:55 -0700] Unknown directive JobPrivateAccess on line
85 of /etc/cups/cupsd.conf.
E [31/Mar/2013:17:00:55 -0700] Unknown directive JobPrivateValues on line
86 of /etc/cups/cupsd.conf.
E [31/Mar/2013:17:00:55 -0700] Unknown directive SubscriptionPrivateAccess
on line 87 of /etc/cups/cupsd.conf.
E [31/Mar/2013:17:00:55 -0700] Unknown directive SubscriptionPrivateValues
on line 88 of /etc/cups/cupsd.conf.
W [31/Mar/2013:17:00:56 -0700] failed to find device: cups-HP_LaserJet_P1005
W [31/Mar/2013:20:47:43 -0700] Duplicate listen address
"/var/run/cups/cups.sock" ignored.
E [31/Mar/2013:20:47:44 -0700] Unknown directive JobPrivateAccess on line
85 of /etc/cups/cupsd.conf.
E [31/Mar/2013:20:47:44 -0700] Unknown directive JobPrivateValues on line
86 of /etc/cups/cupsd.conf.
E [31/Mar/2013:20:47:44 -0700] Unknown directive SubscriptionPrivateAccess
on line 87 of /etc/cups/cupsd.conf.
E [31/Mar/2013:20:47:44 -0700] Unknown directive SubscriptionPrivateValues
on line 88 of /etc/cups/cupsd.conf.
W [31/Mar/2013:20:47:48 -0700] failed to find device: cups-HP_LaserJet_P1005
W [31/Mar/2013:20:55:37 -0700] Duplicate listen address
"/var/run/cups/cups.sock" ignored.
E [31/Mar/2013:20:55:37 -0700] Unknown directive JobPrivateAccess on line
85 of /etc/cups/cupsd.conf.
E [31/Mar/2013:20:55:37 -0700] Unknown directive JobPrivateValues on line
86 of /etc/cups/cupsd.conf.
E [31/Mar/2013:20:55:37 -0700] Unknown directive SubscriptionPrivateAccess
on line 87 of /etc/cups/cupsd.conf.
E [31/Mar/2013:20:55:37 -0700] Unknown directive SubscriptionPrivateValues
on line 88 of /etc/cups/cupsd.conf.
W [31/Mar/2013:20:55:38 -0700] failed to find device: cups-HP_LaserJet_P1005
E [31/Mar/2013:20:57:53 -0700] [Job 19] Job stopped due to filter errors;
please consult the error_log file for details.
D [31/Mar/2013:20:57:53 -0700] [Job 19] The following messages were
recorded from 08:57:31 PM to 08:57:53 PM
D [31/Mar/2013:20:57:53 -0700] [Job 19] job-sheets=none,none
D [31/Mar/2013:20:57:53 -0700] [Job 19] argv[0]="HP_LaserJet_P1005"
D [31/Mar/2013:20:57:53 -0700] [Job 19] argv[1]="19"
D [31/Mar/2013:20:57:53 -0700] [Job 19] argv[2]="richard"
D [31/Mar/2013:20:57:53 -0700] [Job 19] argv[3]="Saturday-March
30-2013@18:00Gmail
- Printing jobs.pdf"
D [31/Mar/2013:20:57:53 -0700] [Job 19] argv[4]="1"
D [31/Mar/2013:20:57:53 -0700] [Job 19] argv[5]="InputSlot=Auto number-up=1
MediaType=Plain PageSize=Letter OutputMode=Normal Duplex=None
job-uuid=urn:uuid:f618eef2-7be6-3e85-7f98-555a29970340
job-originating-host-name=localhost time-at-creation=1364788202
time-at-processing=1364788651"
D [31/Mar/2013:20:57:53 -0700] [Job 19] argv[6]="/var/spool/cups/d00019-001"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[0]="CUPS_CACHEDIR=/var/cache/cups"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[1]="CUPS_DATADIR=/usr/share/cups"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[2]="CUPS_DOCROOT=/usr/share/cups/www"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[3]="CUPS_FONTPATH=/usr/share/cups/fonts"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[4]="CUPS_REQUESTROOT=/var/spool/cups"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[5]="CUPS_SERVERBIN=/usr/lib/cups"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[6]="CUPS_SERVERROOT=/etc/cups"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[7]="CUPS_STATEDIR=/var/run/cups"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[8]="HOME=/var/spool/cups/tmp"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[9]="PATH=/usr/lib/cups/filter:/usr/lib64/cups/filter:/usr/bin:/usr/sbin:/bin:/usr/bin"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[10]="SERVER_ADMIN=root(a)localhost.localdomain"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[11]="SOFTWARE=CUPS/1.5.4"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[12]="TMPDIR=/var/spool/cups/tmp"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[13]="USER=root"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[14]="CUPS_MAX_MESSAGE=2047"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[15]="CUPS_SERVER=/var/run/cups/cups.sock"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[16]="CUPS_ENCRYPTION=IfRequested"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[17]="IPP_PORT=631"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[18]="CHARSET=utf-8"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[19]="LANG=en_US.UTF-8"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[20]="PPD=/etc/cups/ppd/HP_LaserJet_P1005.ppd"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[21]="RIP_MAX_CACHE=128m"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[22]="CONTENT_TYPE=application/pdf"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[23]="DEVICE_URI=hp:/usb/HP_LaserJet_P1005?serial=BB01DD2"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[24]="PRINTER_INFO=HP_LaserJet_P1005"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[25]="PRINTER_LOCATION="
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[26]="PRINTER=HP_LaserJet_P1005"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[27]="PRINTER_STATE_REASONS=none"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[28]="CUPS_FILETYPE=document"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[29]="FINAL_CONTENT_TYPE=printer/HP_LaserJet_P1005"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[30]="AUTH_I****"
D [31/Mar/2013:20:57:53 -0700] [Job 19] Started filter
/usr/lib/cups/filter/pdftops (PID 2024)
D [31/Mar/2013:20:57:53 -0700] [Job 19] Started filter
/usr/lib/cups/filter/gstoraster (PID 2025)
D [31/Mar/2013:20:57:53 -0700] [Job 19] Started filter
/usr/lib/cups/filter/hpcups (PID 2026)
D [31/Mar/2013:20:57:53 -0700] [Job 19] Started backend
/usr/lib/cups/backend/hp (PID 2027)
D [31/Mar/2013:20:57:53 -0700] [Job 19] STATE: -marker-supply-low-warning
D [31/Mar/2013:20:57:53 -0700] [Job 19] Started filter pdftops (PID 2030)
D [31/Mar/2013:20:57:53 -0700] [Job 19] Started filter pstops (PID 2031)
D [31/Mar/2013:20:57:53 -0700] [Job 19] Page = 612x792; 12,13 to 600,779
D [31/Mar/2013:20:57:53 -0700] [Job 19] slow_collate=0, slow_duplex=0,
slow_order=0
D [31/Mar/2013:20:57:53 -0700] [Job 19] Before copy_comments -
%!PS-Adobe-3.0
D [31/Mar/2013:20:57:53 -0700] [Job 19] %!PS-Adobe-3.0
D [31/Mar/2013:20:57:53 -0700] [Job 19] %Produced by poppler pdftops
version: 0.20.2 (http://poppler.freedesktop.org)
D [31/Mar/2013:20:57:53 -0700] [Job 19] %%Creator: cairo 1.12.8 (
http://cairographics.org)
D [31/Mar/2013:20:57:53 -0700] [Job 19] %%LanguageLevel: 3
D [31/Mar/2013:20:57:53 -0700] [Job 19] %%DocumentSuppliedResources: (atend)
D [31/Mar/2013:20:57:53 -0700] [Job 19] %%DocumentMedia: 612x792 612 792 0
() ()
D [31/Mar/2013:20:57:53 -0700] [Job 19] %%BoundingBox: 0 0 612 792
D [31/Mar/2013:20:57:53 -0700] [Job 19] %%Pages: 2
D [31/Mar/2013:20:57:53 -0700] [Job 19] %%EndComments
D [31/Mar/2013:20:57:53 -0700] [Job 19] Before copy_prolog - %%BeginProlog
D [31/Mar/2013:20:57:53 -0700] [Job 19] Before copy_setup - %%BeginSetup
D [31/Mar/2013:20:57:53 -0700] [Job 19] Before page loop - %%Page: 1 1
D [31/Mar/2013:20:57:53 -0700] [Job 19] Copying page 1...
D [31/Mar/2013:20:57:53 -0700] [Job 19] pagew = 588.0, pagel = 766.0
D [31/Mar/2013:20:57:53 -0700] [Job 19] bboxx = 0, bboxy = 0, bboxw = 612,
bboxl = 792
D [31/Mar/2013:20:57:53 -0700] [Job 19] PageLeft = 12.0, PageRight = 600.0
D [31/Mar/2013:20:57:53 -0700] [Job 19] PageTop = 779.0, PageBottom = 13.0
D [31/Mar/2013:20:57:53 -0700] [Job 19] PageWidth = 612.0, PageLength =
792.0
D [31/Mar/2013:20:57:53 -0700] [Job 19] Copying page 2...
D [31/Mar/2013:20:57:53 -0700] [Job 19] pagew = 588.0, pagel = 766.0
D [31/Mar/2013:20:57:53 -0700] [Job 19] bboxx = 0, bboxy = 0, bboxw = 612,
bboxl = 792
D [31/Mar/2013:20:57:53 -0700] [Job 19] PageLeft = 12.0, PageRight = 600.0
D [31/Mar/2013:20:57:53 -0700] [Job 19] PageTop = 779.0, PageBottom = 13.0
D [31/Mar/2013:20:57:53 -0700] [Job 19] PageWidth = 612.0, PageLength =
792.0
D [31/Mar/2013:20:57:53 -0700] [Job 19] Wrote 2 pages...
D [31/Mar/2013:20:57:53 -0700] [Job 19] PID 2030 (pdftops) exited with no
errors.
D [31/Mar/2013:20:57:53 -0700] [Job 19] PID 2031 (pstops) exited with no
errors.
D [31/Mar/2013:20:57:53 -0700] [Job 19] PPD uses qualifier 'Gray.Plain.'
D [31/Mar/2013:20:57:53 -0700] [Job 19] Calling
FindDeviceById(HP_LaserJet_P1005)
D [31/Mar/2013:20:57:53 -0700] [Job 19] Failed to send:
org.freedesktop.ColorManager.Failed:device id 'HP_LaserJet_P1005' does not
exists
D [31/Mar/2013:20:57:53 -0700] [Job 19] Failed to get profile filename!
D [31/Mar/2013:20:57:53 -0700] [Job 19] no profiles specified in PPD
D [31/Mar/2013:20:57:53 -0700] [Job 19] Set job-printer-state-message to
"no profiles specified in PPD", current level=INFO
D [31/Mar/2013:20:57:53 -0700] [Job 19] Ghostscript command line:
/usr/bin/gs -dQUIET -dPARANOIDSAFER -dNOPAUSE -dBATCH -dNOINTERPOLATE
-dNOMEDIAATTRS -sDEVICE=cups -sstdout=%stderr -sOutputFile=%stdout
-I/usr/share/cups/fonts -c -f -_
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[0]="CUPS_CACHEDIR=/var/cache/cups"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[1]="CUPS_DATADIR=/usr/share/cups"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[2]="CUPS_DOCROOT=/usr/share/cups/www"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[3]="CUPS_FONTPATH=/usr/share/cups/fonts"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[4]="CUPS_REQUESTROOT=/var/spool/cups"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[5]="CUPS_SERVERBIN=/usr/lib/cups"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[6]="CUPS_SERVERROOT=/etc/cups"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[7]="CUPS_STATEDIR=/var/run/cups"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[8]="HOME=/var/spool/cups/tmp"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[9]="PATH=/usr/lib/cups/filter:/usr/lib64/cups/filter:/usr/bin:/usr/sbin:/bin:/usr/bin"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[10]="SERVER_ADMIN=root(a)localhost.localdomain"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[11]="SOFTWARE=CUPS/1.5.4"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[12]="TMPDIR=/var/spool/cups/tmp"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[13]="USER=root"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[14]="CUPS_MAX_MESSAGE=2047"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[15]="CUPS_SERVER=/var/run/cups/cups.sock"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[16]="CUPS_ENCRYPTION=IfRequested"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[17]="IPP_PORT=631"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[18]="CHARSET=utf-8"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[19]="LANG=en_US.UTF-8"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[20]="PPD=/etc/cups/ppd/HP_LaserJet_P1005.ppd"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[21]="RIP_MAX_CACHE=128m"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[22]="CONTENT_TYPE=application/pdf"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[23]="DEVICE_URI=hp:/usb/HP_LaserJet_P1005?serial=BB01DD2"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[24]="PRINTER_INFO=HP_LaserJet_P1005"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[25]="PRINTER_LOCATION="
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[26]="PRINTER=HP_LaserJet_P1005"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[27]="PRINTER_STATE_REASONS=none"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[28]="CUPS_FILETYPE=document"
D [31/Mar/2013:20:57:53 -0700] [Job 19]
envp[29]="FINAL_CONTENT_TYPE=printer/HP_LaserJet_P1005"
D [31/Mar/2013:20:57:53 -0700] [Job 19] envp[30]="AUTH_INFO_REQUIRED=none"
D [31/Mar/2013:20:57:53 -0700] [Job 19] Start rendering...
D [31/Mar/2013:20:57:53 -0700] [Job 19] Set job-printer-state-message to
"Start rendering...", current level=INFO
D [31/Mar/2013:20:57:53 -0700] [Job 19] Processing page 1...
D [31/Mar/2013:20:57:53 -0700] [Job 19] Set job-printer-state-message to
"Processing page 1...", current level=INFO
D [31/Mar/2013:20:57:53 -0700] [Job 19] STATE: +connecting-to-device
D [31/Mar/2013:20:57:53 -0700] [Job 19] STATE: +hplip.plugin-error
D [31/Mar/2013:20:57:53 -0700] [Job 19] prnt/hpcups/HPCupsFilter.cpp 453:
m_Job initialization failed with error = 48
D [31/Mar/2013:20:57:53 -0700] [Job 19] STATE: -connecting-to-device
D [31/Mar/2013:20:57:53 -0700] [Job 19] STATE:
-media-empty-error,media-jam-error,hplip.plugin-error,cover-open-error,toner-empty-error,other
D [31/Mar/2013:20:57:53 -0700] [Job 19] prnt/backend/hp.c 371: read new pjl
status: 10023
D [31/Mar/2013:20:57:53 -0700] [Job 19] prnt/backend/hp.c 373: read pjl
job_end: 0
D [31/Mar/2013:20:57:53 -0700] [Job 19] prnt/backend/hp.c 371: read new pjl
status: 10001
D [31/Mar/2013:20:57:53 -0700] [Job 19] ready to print
D [31/Mar/2013:20:57:53 -0700] [Job 19] End of messages
D [31/Mar/2013:20:57:53 -0700] [Job 19] printer-state=3(idle)
D [31/Mar/2013:20:57:53 -0700] [Job 19] printer-state-message="ready to
print"
D [31/Mar/2013:20:57:53 -0700] [Job 19] printer-state-reasons=none
E [31/Mar/2013:21:02:54 -0700] [Job 19] Stopping unresponsive job!
W [01/Apr/2013:08:43:14 -0700] Duplicate listen address
"/var/run/cups/cups.sock" ignored.
E [01/Apr/2013:08:43:15 -0700] Unknown directive JobPrivateAccess on line
85 of /etc/cups/cupsd.conf.
E [01/Apr/2013:08:43:15 -0700] Unknown directive JobPrivateValues on line
86 of /etc/cups/cupsd.conf.
E [01/Apr/2013:08:43:15 -0700] Unknown directive SubscriptionPrivateAccess
on line 87 of /etc/cups/cupsd.conf.
E [01/Apr/2013:08:43:15 -0700] Unknown directive SubscriptionPrivateValues
on line 88 of /etc/cups/cupsd.conf.
W [01/Apr/2013:08:43:15 -0700] failed to find device: cups-HP_LaserJet_P1005
W [01/Apr/2013:12:52:53 -0700] Duplicate listen address
"/var/run/cups/cups.sock" ignored.
E [01/Apr/2013:12:52:53 -0700] Unknown directive JobPrivateAccess on line
85 of /etc/cups/cupsd.conf.
E [01/Apr/2013:12:52:53 -0700] Unknown directive JobPrivateValues on line
86 of /etc/cups/cupsd.conf.
E [01/Apr/2013:12:52:53 -0700] Unknown directive SubscriptionPrivateAccess
on line 87 of /etc/cups/cupsd.conf.
E [01/Apr/2013:12:52:53 -0700] Unknown directive SubscriptionPrivateValues
on line 88 of /etc/cups/cupsd.conf.
W [01/Apr/2013:12:52:53 -0700] failed to find device: cups-HP_LaserJet_P1005
W [01/Apr/2013:12:58:35 -0700] failed to CreateProfile:
org.freedesktop.ColorManager.AlreadyExists:profile id
'HP_LaserJet_P1005-Gray..' already exists
W [01/Apr/2013:12:58:35 -0700] failed to CreateProfile:
org.freedesktop.ColorManager.AlreadyExists:profile id
'HP_LaserJet_P1005-RGB..' already exists
W [01/Apr/2013:12:58:35 -0700] failed to CreateDevice:
org.freedesktop.ColorManager.AlreadyExists:device id
'cups-HP_LaserJet_P1005' already exists
W [01/Apr/2013:13:03:53 -0700] failed to CreateProfile:
org.freedesktop.ColorManager.AlreadyExists:profile id
'HP_LaserJet_P1005-Gray..' already exists
W [01/Apr/2013:13:03:53 -0700] failed to CreateProfile:
org.freedesktop.ColorManager.AlreadyExists:profile id
'HP_LaserJet_P1005-RGB..' already exists
W [01/Apr/2013:13:03:53 -0700] failed to CreateDevice:
org.freedesktop.ColorManager.AlreadyExists:device id
'cups-HP_LaserJet_P1005' already exists
W [01/Apr/2013:13:07:09 -0700] Duplicate listen address
"/var/run/cups/cups.sock" ignored.
E [01/Apr/2013:13:07:09 -0700] Unknown directive JobPrivateAccess on line
85 of /etc/cups/cupsd.conf.
E [01/Apr/2013:13:07:09 -0700] Unknown directive JobPrivateValues on line
86 of /etc/cups/cupsd.conf.
E [01/Apr/2013:13:07:09 -0700] Unknown directive SubscriptionPrivateAccess
on line 87 of /etc/cups/cupsd.conf.
E [01/Apr/2013:13:07:09 -0700] Unknown directive SubscriptionPrivateValues
on line 88 of /etc/cups/cupsd.conf.
W [01/Apr/2013:13:07:09 -0700] failed to find device: cups-HP_LaserJet_P1005
W [01/Apr/2013:19:12:53 -0700] Duplicate listen address
"/var/run/cups/cups.sock" ignored.
E [01/Apr/2013:19:12:53 -0700] Unknown directive JobPrivateAccess on line
85 of /etc/cups/cupsd.conf.
E [01/Apr/2013:19:12:53 -0700] Unknown directive JobPrivateValues on line
86 of /etc/cups/cupsd.conf.
E [01/Apr/2013:19:12:53 -0700] Unknown directive SubscriptionPrivateAccess
on line 87 of /etc/cups/cupsd.conf.
E [01/Apr/2013:19:12:53 -0700] Unknown directive SubscriptionPrivateValues
on line 88 of /etc/cups/cupsd.conf.
W [01/Apr/2013:19:12:54 -0700] failed to find device: cups-HP_LaserJet_P1005
W [01/Apr/2013:19:40:25 -0700] Duplicate listen address
"/var/run/cups/cups.sock" ignored.
E [01/Apr/2013:19:40:25 -0700] Unknown directive JobPrivateAccess on line
85 of /etc/cups/cupsd.conf.
E [01/Apr/2013:19:40:25 -0700] Unknown directive JobPrivateValues on line
86 of /etc/cups/cupsd.conf.
E [01/Apr/2013:19:40:25 -0700] Unknown directive SubscriptionPrivateAccess
on line 87 of /etc/cups/cupsd.conf.
E [01/Apr/2013:19:40:25 -0700] Unknown directive SubscriptionPrivateValues
on line 88 of /etc/cups/cupsd.conf.
W [01/Apr/2013:19:40:26 -0700] failed to find device: cups-HP_LaserJet_P1005
W [01/Apr/2013:19:46:56 -0700] Duplicate listen address
"/var/run/cups/cups.sock" ignored.
E [01/Apr/2013:19:46:56 -0700] Unknown directive JobPrivateAccess on line
85 of /etc/cups/cupsd.conf.
E [01/Apr/2013:19:46:56 -0700] Unknown directive JobPrivateValues on line
86 of /etc/cups/cupsd.conf.
E [01/Apr/2013:19:46:56 -0700] Unknown directive SubscriptionPrivateAccess
on line 87 of /etc/cups/cupsd.conf.
E [01/Apr/2013:19:46:56 -0700] Unknown directive SubscriptionPrivateValues
on line 88 of /etc/cups/cupsd.conf.
W [01/Apr/2013:19:46:57 -0700] failed to find device: cups-HP_LaserJet_P1005
W [01/Apr/2013:19:51:00 -0700] Duplicate listen address
"/var/run/cups/cups.sock" ignored.
E [01/Apr/2013:19:51:00 -0700] Unknown directive JobPrivateAccess on line
85 of /etc/cups/cupsd.conf.
E [01/Apr/2013:19:51:00 -0700] Unknown directive JobPrivateValues on line
86 of /etc/cups/cupsd.conf.
E [01/Apr/2013:19:51:00 -0700] Unknown directive SubscriptionPrivateAccess
on line 87 of /etc/cups/cupsd.conf.
E [01/Apr/2013:19:51:00 -0700] Unknown directive SubscriptionPrivateValues
on line 88 of /etc/cups/cupsd.conf.
W [01/Apr/2013:19:51:00 -0700] failed to find device: cups-HP_LaserJet_P1005
12:44 a.m.
On Mon, Apr 1, 2013 at 10:00 PM, Ed Greshko <Ed.Greshko(a)greshko.com> wrote:
On 04/02/13 12:54, Richard Vickery wrote:
> Here's what I get after all this:
>
> netstat -nap | grep cups
> tcp 0 0 127.0.0.1:631 <http://127.0.0.1:631>
0.0.0.0:* LISTEN 3716/cupsd
> tcp6 0 0 ::1:631 :::*
LISTEN 3716/cupsd
> udp 0 0 0.0.0.0:631 <http://0.0.0.0:631>
0.0.0.0:* 3716/cupsd
> unix 2 [ ACC ] STREAM LISTENING 15237 1/systemd
/var/run/cups/cups.sock
> unix 3 [ ] STREAM CONNECTED 53621 3716/cupsd
> unix 3 [ ] STREAM CONNECTED 54288 3716/cupsd
/var/run/cups/cups.sock
> unix 3 [ ] STREAM CONNECTED 53234 3716/cupsd
> unix 3 [ ] STREAM CONNECTED 53245 3716/cupsd
> unix 3 [ ] STREAM CONNECTED 54287 3716/cupsd
/var/run/cups/cups.sock
Now you should be able to
Go to....
http://localhost:631/printers/
Then click on the link for your printer.
Then click on the pull down menu for "Maintenance" and choose "Print Test
Page".
I just rebooted and lost it again. I'll try anew in the morning.
1:18 a.m.
On 04/03/13 07:58, Richard Vickery wrote:
Thanks Ed,
It works! I'm guessing that I can just run the commands - that I've saved off of
the computer on an external drive - the next time I "lose" the printer in an
upgrade.
Welcome....
FWIW, I've never "lost" a printer as result of an update/upgrade. The
chances of having the same problem and resolving it in the same manner is remote.
--
From now on, at least during winter time, Im going to blame all
spelling an grammar erros on the cat sitting on my chest every time I sit down at the
computer....
7:44 a.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 03/31/2013 06:27 PM, Ed Greshko wrote:
On 04/01/13 03:30, Richard Vickery wrote:
>
> No. The file /etc/selinux/targeted/contexts/files/file_contexts is
> provided by selinux-policy-targeted. cups and hplip are not mutually
> exclusive.
>
> I just checked and earlier versions of the policy did have
> hplip_var_lib....
>
> So....
>
> yum update selinux-policy-targeted
>
> Should correct that problem....
>
> Can you print with lpr using either -P or setting the default?
>
>
> Installing the above and going to print now get an error in the form of
> the following, forcing me to go back through emails to figure out how I
> got in recently. If I can't get a bug report done today, the following is
> what I have just had returned:
>
> SELinux is preventing /usr/sbin/cupsd from using the 'transition'
> accesses on a process.
I would not bugzilla this or create a locale policy quite yet. One has to
consider that selinux is not HW sensitive. Also, this is basic system
stuff that if one has installed via the normal means it is used by "lots"
of people.....
I would first do this.....
[root@meimei ~]# ls -dZ /usr/sbin/cupsd -rwxr-xr-x. root root
system_u:object_r:cupsd_exec_t:s0 /usr/sbin/cupsd
[root@meimei ~]# ls -dZ /usr/lib/cups/notifier/dbus -rwxr-xr-x. root root
system_u:object_r:bin_t:s0 /usr/lib/cups/notifier/dbus
I'm guessing one of these will not match the above.....
I would then...
[root@meimei ~]# yum check-update (to make sure no updates are
pending...and update if there are)
followed by
[root@meimei ~]# touch /.autorelabel
And then *reboot*. The boot process will take longer than normal....
Then try again....
systemctl restart cups
Should fix your problem.
No need to relabel. The update plus restarting the service will fix it.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlFZgSAACgkQrlYvE4MpobOr4QCgq0DmSeqNjAv7p8TPqUdRIGdm
N5wAni3MWS56uzEJJaRaWA8TcbKeBCaT
=+ATP
-----END PGP SIGNATURE-----
6:58 p.m.
On Tue, Apr 2, 2013 at 2:25 PM, Ed Greshko <Ed.Greshko(a)greshko.com> wrote:
On 04/03/13 02:27, Richard Vickery wrote:
> lthough it's present, I still can't print. localhost:631/printers is
showing ten jobs and holding each one. Driver says:
>
> Driver: HP LaserJet p1005, hpcups 3.13.2, requires proprietary
plugin (color, 2-sided printing)
>
>
> ...is a proprietary plugin important? Should I change the driver to
Laserjet 1020, given the printer is a p1005? It was either this or 1030
before I changed it.
From the command line, as root, run "hp-plugin".
--
From now on, at least during winter time, Im going to blame all spelling
an grammar erros on the cat sitting on my chest every time I sit down at
the computer....
--
Thanks Ed,
It works! [?] I'm guessing that I can just run the commands - that I've
saved off of the computer on an external drive - the next time I "lose" the
printer in an upgrade.
4:25 p.m.
On 04/03/13 02:27, Richard Vickery wrote:
lthough it's present, I still can't print.
localhost:631/printers is showing ten jobs and holding each one. Driver says:
Driver: HP LaserJet p1005, hpcups 3.13.2, requires proprietary plugin (color, 2-sided
printing)
...is a proprietary plugin important? Should I change the driver to Laserjet 1020, given
the printer is a p1005? It was either this or 1030 before I changed it.
From the command line, as root, run "hp-plugin".
--
From now on, at least during winter time, Im going to blame all
spelling an grammar erros on the cat sitting on my chest every time I sit down at the
computer....
1:27 p.m.
On Mon, Apr 1, 2013 at 10:44 PM, Richard Vickery <
richard.vickeryrv(a)gmail.com> wrote:
On Mon, Apr 1, 2013 at 10:00 PM, Ed Greshko <Ed.Greshko(a)greshko.com>wrote:
> On 04/02/13 12:54, Richard Vickery wrote:
> > Here's what I get after all this:
> >
> > netstat -nap | grep cups
> > tcp 0 0 127.0.0.1:631 <http://127.0.0.1:631>
> 0.0.0.0:* LISTEN 3716/cupsd
> > tcp6 0 0 ::1:631 :::*
> LISTEN 3716/cupsd
> > udp 0 0 0.0.0.0:631 <http://0.0.0.0:631>
> 0.0.0.0:* 3716/cupsd
> > unix 2 [ ACC ] STREAM LISTENING 15237 1/systemd
> /var/run/cups/cups.sock
> > unix 3 [ ] STREAM CONNECTED 53621 3716/cupsd
> > unix 3 [ ] STREAM CONNECTED 54288 3716/cupsd
> /var/run/cups/cups.sock
> > unix 3 [ ] STREAM CONNECTED 53234 3716/cupsd
> > unix 3 [ ] STREAM CONNECTED 53245 3716/cupsd
> > unix 3 [ ] STREAM CONNECTED 54287 3716/cupsd
> /var/run/cups/cups.sock
>
> Now you should be able to
>
> Go to....
>
> http://localhost:631/printers/
>
> Then click on the link for your printer.
> Then click on the pull down menu for "Maintenance" and choose "Print
Test
> Page".
>
>
>
>
>
I just rebooted and lost it again. I'll try anew in the morning.
Thanks for the help Ed;
Although it's present, I still can't print. localhost:631/printers is
showing ten jobs and holding each one. Driver says:
Driver:HP LaserJet p1005, hpcups 3.13.2, requires proprietary plugin
(color, 2-sided printing)
...is a proprietary plugin important? Should I change the driver to
Laserjet 1020, given the printer is a p1005? It was either this or 1030
before I changed it.
midnight
On 04/02/13 12:54, Richard Vickery wrote:
Here's what I get after all this:
netstat -nap | grep cups
tcp 0 0 127.0.0.1:631 <http://127.0.0.1:631> 0.0.0.0:*
LISTEN 3716/cupsd
tcp6 0 0 ::1:631 :::* LISTEN
3716/cupsd
udp 0 0 0.0.0.0:631 <http://0.0.0.0:631> 0.0.0.0:*
3716/cupsd
unix 2 [ ACC ] STREAM LISTENING 15237 1/systemd
/var/run/cups/cups.sock
unix 3 [ ] STREAM CONNECTED 53621 3716/cupsd
unix 3 [ ] STREAM CONNECTED 54288 3716/cupsd
/var/run/cups/cups.sock
unix 3 [ ] STREAM CONNECTED 53234 3716/cupsd
unix 3 [ ] STREAM CONNECTED 53245 3716/cupsd
unix 3 [ ] STREAM CONNECTED 54287 3716/cupsd
/var/run/cups/cups.sock
Now you should be able to
Go to....
http://localhost:631/printers/
Then click on the link for your printer.
Then click on the pull down menu for "Maintenance" and choose "Print Test
Page".
--
From now on, at least during winter time, Im going to blame all
spelling an grammar erros on the cat sitting on my chest every time I sit down at the
computer....
11:54 p.m.
On Mon, Apr 1, 2013 at 9:38 PM, Ed Greshko <Ed.Greshko(a)greshko.com> wrote:
On 04/02/13 12:24, Richard Vickery wrote:
>
>
> I had the printer unplugged on doing this; I took the computer into the
other room.
>
> # netstat -nap | grep cups
> udp 0 0 0.0.0.0:631 <http://0.0.0.0:631>
0.0.0.0:* 828/cupsd
> unix 2 [ ACC ] STREAM LISTENING 15237 1/systemd
/var/run/cups/cups.sock
> unix 3 [ ] STREAM CONNECTED 24575 828/cupsd
> unix 3 [ ] STREAM CONNECTED 19324 828/cupsd
> unix 3 [ ] STREAM CONNECTED 18454 828/cupsd
>
>
> # diff /etc/cups/cupsd.conf /etc/cups/cupsd.conf.default
> 1a2,10
> > #
> > # "$Id: cupsd.conf.in <http://cupsd.conf.in> 9407 2010-12-09
21:24:51Z mike $"
> > #
> > # Sample configuration file for the CUPS scheduler. See "man
cupsd.conf" for a
> > # complete description of this file.
> > #
> >
> > # Log general information in error_log - change "warn" to
"debug"
> > # for troubleshooting...
>
Well, cupsd isn't listening on 127.0.0.1 which explains why you can't
connect to it....
I've never had to modify the cupsd.conf but it would seem yours has
been....
I would....
cd /etc/cups
mv cupsd.conf cupsd.conf-old
cp cupsd.conf.default cupsd.conf
restorecon -F cupsd.conf
systemctl restart cups
netstat -nap | grep cups
You should see....
[root@meimei cups]# netstat -nap | grep cups
tcp 0 0 127.0.0.1:631 0.0.0.0:*
LISTEN 14946/cupsd
tcp6 0 0 ::1:631 :::* LISTEN
14946/cupsd
udp 0 0 0.0.0.0:631 0.0.0.0:*
14946/cupsd
unix 2 [ ACC ] STREAM LISTENING 17434 1/systemd
/var/run/cups/cups.sock
unix 3 [ ] STREAM CONNECTED 6184339 14946/cupsd
unix 3 [ ] STREAM CONNECTED 5518265 14946/cupsd
unix 3 [ ] STREAM CONNECTED 5518583 14946/cupsd
FWIW, on my system where no modifications were done....
[root@meimei cups]# ll cupsd.conf*
-rw-r-----. 1 root lp 4548 Dec 4 20:40 cupsd.conf
-rw-r-----. 1 root lp 4548 Dec 4 20:40 cupsd.conf.default
Here's what I get after all this:
netstat -nap | grep cups
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN
3716/cupsd
tcp6 0 0 ::1:631 :::* LISTEN
3716/cupsd
udp 0 0 0.0.0.0:631 0.0.0.0:*
3716/cupsd
unix 2 [ ACC ] STREAM LISTENING 15237 1/systemd
/var/run/cups/cups.sock
unix 3 [ ] STREAM CONNECTED 53621 3716/cupsd
unix 3 [ ] STREAM CONNECTED 54288 3716/cupsd
/var/run/cups/cups.sock
unix 3 [ ] STREAM CONNECTED 53234 3716/cupsd
unix 3 [ ] STREAM CONNECTED 53245 3716/cupsd
unix 3 [ ] STREAM CONNECTED 54287 3716/cupsd
/var/run/cups/cups.sock
11:38 p.m.
On 04/02/13 12:24, Richard Vickery wrote:
I had the printer unplugged on doing this; I took the computer into the other room.
# netstat -nap | grep cups
udp 0 0 0.0.0.0:631 <http://0.0.0.0:631> 0.0.0.0:*
828/cupsd
unix 2 [ ACC ] STREAM LISTENING 15237 1/systemd
/var/run/cups/cups.sock
unix 3 [ ] STREAM CONNECTED 24575 828/cupsd
unix 3 [ ] STREAM CONNECTED 19324 828/cupsd
unix 3 [ ] STREAM CONNECTED 18454 828/cupsd
# diff /etc/cups/cupsd.conf /etc/cups/cupsd.conf.default
1a2,10
> #
> # "$Id: cupsd.conf.in <http://cupsd.conf.in> 9407 2010-12-09 21:24:51Z
mike $"
> #
> # Sample configuration file for the CUPS scheduler. See "man cupsd.conf"
for a
> # complete description of this file.
> #
>
> # Log general information in error_log - change "warn" to
"debug"
> # for troubleshooting...
Well, cupsd isn't listening on 127.0.0.1 which explains why you can't connect to
it....
I've never had to modify the cupsd.conf but it would seem yours has been....
I would....
cd /etc/cups
mv cupsd.conf cupsd.conf-old
cp cupsd.conf.default cupsd.conf
restorecon -F cupsd.conf
systemctl restart cups
netstat -nap | grep cups
You should see....
[root@meimei cups]# netstat -nap | grep cups
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN
14946/cupsd
tcp6 0 0 ::1:631 :::* LISTEN
14946/cupsd
udp 0 0 0.0.0.0:631 0.0.0.0:*
14946/cupsd
unix 2 [ ACC ] STREAM LISTENING 17434 1/systemd
/var/run/cups/cups.sock
unix 3 [ ] STREAM CONNECTED 6184339 14946/cupsd
unix 3 [ ] STREAM CONNECTED 5518265 14946/cupsd
unix 3 [ ] STREAM CONNECTED 5518583 14946/cupsd
FWIW, on my system where no modifications were done....
[root@meimei cups]# ll cupsd.conf*
-rw-r-----. 1 root lp 4548 Dec 4 20:40 cupsd.conf
-rw-r-----. 1 root lp 4548 Dec 4 20:40 cupsd.conf.default
--
From now on, at least during winter time, Im going to blame all
spelling an grammar erros on the cat sitting on my chest every time I sit down at the
computer....
5:31 p.m.
On 04/02/13 04:14, Richard Vickery wrote:
Now the printer clicks on to print a document, then, within a tenth, or a hundredth, of a
second, clicks as if printing were completed without printing.
Go to....
http://localhost:631/printers/
Then click on the link for your printer.
Then click on the pull down menu for "Maintenance" and choose "Print Test
Page".
Then check /var/log/cups/error_log
--
From now on, at least during winter time, Im going to blame all
spelling an grammar erros on the cat sitting on my chest every time I sit down at the
computer....
5:27 p.m.
On 04/01/13 03:30, Richard Vickery wrote:
No. The file /etc/selinux/targeted/contexts/files/file_contexts is provided by
selinux-policy-targeted. cups and hplip are not mutually exclusive.
I just checked and earlier versions of the policy did have hplip_var_lib....
So....
yum update selinux-policy-targeted
Should correct that problem....
Can you print with lpr using either -P or setting the default?
Installing the above and going to print now get an error in the form of the following,
forcing me to go back through emails to figure out how I got in recently. If I can't
get a bug report done today, the following is what I have just had returned:
SELinux is preventing /usr/sbin/cupsd from using the 'transition' accesses on a
process.
I would not bugzilla this or create a locale policy quite yet. One has to consider that
selinux is not HW sensitive. Also, this is basic system stuff that if one has installed
via the normal means it is used by "lots" of people.....
I would first do this.....
[root@meimei ~]# ls -dZ /usr/sbin/cupsd
-rwxr-xr-x. root root system_u:object_r:cupsd_exec_t:s0 /usr/sbin/cupsd
[root@meimei ~]# ls -dZ /usr/lib/cups/notifier/dbus
-rwxr-xr-x. root root system_u:object_r:bin_t:s0 /usr/lib/cups/notifier/dbus
I'm guessing one of these will not match the above.....
I would then...
[root@meimei ~]# yum check-update (to make sure no updates are pending...and update if
there are)
followed by
[root@meimei ~]# touch /.autorelabel
And then *reboot*. The boot process will take longer than normal....
Then try again....
--
From now on, at least during winter time, Im going to blame all
spelling an grammar erros on the cat sitting on my chest every time I sit down at the
computer....
3:53 p.m.
On Mar 31, 2013 1:04 PM, "Joe Zeff" <joe(a)zeff.us> wrote:
I tried and failed to do a report, forgetting my login password
to bugzilla
On 03/31/2013 12:30 PM, Richard Vickery wrote:
> Then you should report this as a bug.
> You can generate a local policy module to allow this access.
> Do
> allow this access for now by executing:
> # grep cupsd /var/log/audit/audit.log | audit2allow -M mypol
> # semodule -i mypol.pp
Have you reported it as a bug? If not, have you followed the quoted
instructions?
(I'm not sure, but I think you need root access; at least,
I've always done it that way.) If not, why not?
3:04 p.m.
On 03/31/2013 12:30 PM, Richard Vickery wrote:
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep cupsd /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp
Have you reported it as a bug? If not, have you followed the quoted
instructions? (I'm not sure, but I think you need root access; at
least, I've always done it that way.) If not, why not?
12:32 a.m.
On 03/31/13 12:38, Richard Vickery wrote:
On Sat, Mar 30, 2013 at 8:20 PM, Ed Greshko <Ed.Greshko(a)greshko.com
<mailto:Ed.Greshko@greshko.com>> wrote:
On 03/31/13 10:46, Richard Vickery wrote:
>
>
> $ rpm -qa | grep ^hp
> hplip-libs-3.13.2-1.fc18.x86_64
> hplip-gui-3.13.2-1.fc18.x86_64
> hplip-3.13.2-1.fc18.x86_64
> hplip-common-3.13.2-1.fc18.x86_64
> hpijs-3.13.2-1.fc18.x86_64
OK.....
>
> $ lpstat -a
> HP_LaserJet_P1005 accepting requests since Sat 30 Mar 2013 05:47:46 PM PDT
So, the printer is defined. Earlier you noted....
$: lpr March*
lpr: Error - no default destination available.
Since you don't have a default set, you should be able to print with....
lpr -P HP_LaserJet_P1005 file_to_print
>
> $ grep /var/lib/hp /etc/selinux/targeted/contexts/files/file_contexts
> /var/lib/hp(/.*)?system_u:object_r:hplip_var_lib_t:s0
That is very odd. All of my systems have...
I suppose it's that I use hplip rather than cups?
No. The file /etc/selinux/targeted/contexts/files/file_contexts is provided by
selinux-policy-targeted. cups and hplip are not mutually exclusive.
I just checked and earlier versions of the policy did have hplip_var_lib....
So....
yum update selinux-policy-targeted
Should correct that problem....
Can you print with lpr using either -P or setting the default?
--
From now on, at least during winter time, Im going to blame all
spelling an grammar erros on the cat sitting on my chest every time I sit down at the
computer....
11:38 p.m.
On Sat, Mar 30, 2013 at 8:20 PM, Ed Greshko <Ed.Greshko(a)greshko.com> wrote:
On 03/31/13 10:46, Richard Vickery wrote:
>
>
> $ rpm -qa | grep ^hp
> hplip-libs-3.13.2-1.fc18.x86_64
> hplip-gui-3.13.2-1.fc18.x86_64
> hplip-3.13.2-1.fc18.x86_64
> hplip-common-3.13.2-1.fc18.x86_64
> hpijs-3.13.2-1.fc18.x86_64
OK.....
>
> $ lpstat -a
> HP_LaserJet_P1005 accepting requests since Sat 30 Mar 2013 05:47:46 PM
PDT
So, the printer is defined. Earlier you noted....
$: lpr March*
lpr: Error - no default destination available.
Since you don't have a default set, you should be able to print with....
lpr -P HP_LaserJet_P1005 file_to_print
>
> $ grep /var/lib/hp /etc/selinux/targeted/contexts/files/file_contexts
> /var/lib/hp(/.*)?system_u:object_r:hplip_var_lib_t:s0
That is very odd. All of my systems have...
I suppose it's that I use hplip rather than cups?
/var/lib/hp(/.*)? system_u:object_r:cupsd_var_lib_t:s0
Does this match?
[egreshko@meimei files]$ rpm -q selinux-policy-targeted
selinux-policy-targeted-3.11.1-86.fc18.noarch
I get the following:
rpm -q selinux-policy-targeted
selinux-policy-targeted-3.11.1-71.fc18.noarch
10:27 p.m.
On 03/31/13 11:20, Ed Greshko wrote:
So, the printer is defined. Earlier you noted....
$: lpr March*
lpr: Error - no default destination available.
Forgot to mention, you can set the default simply by issuing this command as root....
lpadmin -d HP_LaserJet_P1005
and you'll not need to use the -P option
--
From now on, at least during winter time, Im going to blame all
spelling an grammar erros on the cat sitting on my chest every time I sit down at the
computer....
10:20 p.m.
On 03/31/13 10:46, Richard Vickery wrote:
$ rpm -qa | grep ^hp
hplip-libs-3.13.2-1.fc18.x86_64
hplip-gui-3.13.2-1.fc18.x86_64
hplip-3.13.2-1.fc18.x86_64
hplip-common-3.13.2-1.fc18.x86_64
hpijs-3.13.2-1.fc18.x86_64
OK.....
$ lpstat -a
HP_LaserJet_P1005 accepting requests since Sat 30 Mar 2013 05:47:46 PM PDT
So, the printer is defined. Earlier you noted....
$: lpr March*
lpr: Error - no default destination available.
Since you don't have a default set, you should be able to print with....
lpr -P HP_LaserJet_P1005 file_to_print
$ grep /var/lib/hp /etc/selinux/targeted/contexts/files/file_contexts
/var/lib/hp(/.*)?system_u:object_r:hplip_var_lib_t:s0
That is very odd. All of my systems have...
/var/lib/hp(/.*)? system_u:object_r:cupsd_var_lib_t:s0
Does this match?
[egreshko@meimei files]$ rpm -q selinux-policy-targeted
selinux-policy-targeted-3.11.1-86.fc18.noarch
--
From now on, at least during winter time, Im going to blame all
spelling an grammar erros on the cat sitting on my chest every time I sit down at the
computer....
9:46 p.m.
On Sat, Mar 30, 2013 at 4:46 PM, Ed Greshko <Ed.Greshko(a)greshko.com> wrote:
On 03/31/13 02:02, Richard Vickery wrote:
>
>
>
> On Fri, Mar 29, 2013 at 11:06 PM, Ed Greshko <Ed.Greshko(a)greshko.com<mailto:
Ed.Greshko(a)greshko.com>> wrote:
>
> On 03/30/13 13:03, Richard Vickery wrote:
> > can anyone help me figure out what is going on here? I'll look at
it in the morning, but still might not find it on my own.
> >
> > SELinux is preventing /usr/lib/cups/filter/hpcups from search
access on the directory /var/lib/hp.
> >
> >
>
> What is the output of
>
> ls -dZ /var/lib/hp
>
> It should be
>
> drwxr-xr-x. root root system_u:object_r:cupsd_var_lib_t:s0
/var/lib/hp
>
> If it is not, then
>
> restorecon -R /var/lib/hp
>
>
> Before and after the command restorecon -R /var/lib/hp, ls -dZ
/var/lib/hp reads
>
> drwxr-xr-x. root root system_u:object_r:hplip_var_lib_t:s0 /var/lib/hp
>
> But, when I plug the USB printer, and it connects, the printer doesn't
exist:
>
> $: lpr March*
> lpr: Error - no default destination available.
>
> Location in system-config-printer shows empty / vacant
>
First, keep in mind that I'm currently addressing your selinux issue.
But, just to be sure, what is the output of the following commands.
rpm -qa | grep ^hp
lpstat -a
grep /var/lib/hp /etc/selinux/targeted/contexts/files/file_contexts
Then, would you mind to try this sequence?
[root@localhost ~]# cd /var/lib
[root@localhost lib]# rmdir hp
[root@localhost lib]# mkdir hp
[root@localhost lib]# ls -dZ hp
drwxr-xr-x. root root unconfined_u:object_r:var_lib_t:s0 hp
[root@localhost lib]# restorecon -RF hp
[root@localhost lib]# ls -dZ hp
drwxr-xr-x. root root system_u:object_r:cupsd_var_lib_t:s0 hp
$ rpm -qa | grep ^hp
hplip-libs-3.13.2-1.fc18.x86_64
hplip-gui-3.13.2-1.fc18.x86_64
hplip-3.13.2-1.fc18.x86_64
hplip-common-3.13.2-1.fc18.x86_64
hpijs-3.13.2-1.fc18.x86_64
$ lpstat -a
HP_LaserJet_P1005 accepting requests since Sat 30 Mar 2013 05:47:46 PM PDT
$ grep /var/lib/hp /etc/selinux/targeted/contexts/files/file_contexts
/var/lib/hp(/.*)? system_u:object_r:hplip_var_lib_t:s0
I've got hplip installed rather than - or in addition to - cups
[root@localhost lib]# ls -dZ hp
drwxr-xr-x. root root unconfined_u:object_r:var_lib_t:s0 hp
[root@localhost lib]# restorecon -RF hp
[root@localhost lib]# ls -dZ hp
drwxr-xr-x. root root system_u:object_r:hplip_var_lib_t:s0 hp
6:46 p.m.
On 03/31/13 02:02, Richard Vickery wrote:
On Fri, Mar 29, 2013 at 11:06 PM, Ed Greshko <Ed.Greshko(a)greshko.com
<mailto:Ed.Greshko@greshko.com>> wrote:
On 03/30/13 13:03, Richard Vickery wrote:
> can anyone help me figure out what is going on here? I'll look at it in the
morning, but still might not find it on my own.
>
> SELinux is preventing /usr/lib/cups/filter/hpcups from search access on the
directory /var/lib/hp.
>
>
What is the output of
ls -dZ /var/lib/hp
It should be
drwxr-xr-x. root root system_u:object_r:cupsd_var_lib_t:s0 /var/lib/hp
If it is not, then
restorecon -R /var/lib/hp
Before and after the command restorecon -R /var/lib/hp, ls -dZ /var/lib/hp reads
drwxr-xr-x. root root system_u:object_r:hplip_var_lib_t:s0 /var/lib/hp
But, when I plug the USB printer, and it connects, the printer doesn't exist:
$: lpr March*
lpr: Error - no default destination available.
Location in system-config-printer shows empty / vacant
First, keep in mind that I'm currently addressing your selinux issue.
But, just to be sure, what is the output of the following commands.
rpm -qa | grep ^hp
lpstat -a
grep /var/lib/hp /etc/selinux/targeted/contexts/files/file_contexts
Then, would you mind to try this sequence?
[root@localhost ~]# cd /var/lib
[root@localhost lib]# rmdir hp
[root@localhost lib]# mkdir hp
[root@localhost lib]# ls -dZ hp
drwxr-xr-x. root root unconfined_u:object_r:var_lib_t:s0 hp
[root@localhost lib]# restorecon -RF hp
[root@localhost lib]# ls -dZ hp
drwxr-xr-x. root root system_u:object_r:cupsd_var_lib_t:s0 hp
--
From now on, at least during winter time, Im going to blame all
spelling an grammar erros on the cat sitting on my chest every time I sit down at the
computer....
1:06 a.m.
On 03/30/13 13:03, Richard Vickery wrote:
can anyone help me figure out what is going on here? I'll look at
it in the morning, but still might not find it on my own.
SELinux is preventing /usr/lib/cups/filter/hpcups from search access on the directory
/var/lib/hp.
What is the output of
ls -dZ /var/lib/hp
It should be
drwxr-xr-x. root root system_u:object_r:cupsd_var_lib_t:s0 /var/lib/hp
If it is not, then
restorecon -R /var/lib/hp
--
From now on, at least during winter time, Im going to blame all
spelling an grammar erros on the cat sitting on my chest every time I sit down at the
computer....
1:02 p.m.
On Fri, Mar 29, 2013 at 11:06 PM, Ed Greshko <Ed.Greshko(a)greshko.com> wrote:
On 03/30/13 13:03, Richard Vickery wrote:
> can anyone help me figure out what is going on here? I'll look at it in
the morning, but still might not find it on my own.
>
> SELinux is preventing /usr/lib/cups/filter/hpcups from search access on
the directory /var/lib/hp.
>
>
What is the output of
ls -dZ /var/lib/hp
It should be
drwxr-xr-x. root root system_u:object_r:cupsd_var_lib_t:s0 /var/lib/hp
If it is not, then
restorecon -R /var/lib/hp
Before and after the command restorecon -R /var/lib/hp, ls -dZ /var/lib/hp
reads
drwxr-xr-x. root root system_u:object_r:hplip_var_lib_t:s0 /var/lib/hp
But, when I plug the USB printer, and it connects, the printer doesn't
exist:
$: lpr March*
lpr: Error - no default destination available.
Location in system-config-printer shows empty / vacant
2:30 p.m.
No. The file /etc/selinux/targeted/contexts/files/file_contexts is
provided by selinux-policy-targeted. cups and hplip are not mutually
exclusive.
I just checked and earlier versions of the policy did have
hplip_var_lib....
So....
yum update selinux-policy-targeted
Should correct that problem....
Can you print with lpr using either -P or setting the default?
Installing the above and going to print now get an error in the form of the
following, forcing me to go back through emails to figure out how I got in
recently. If I can't get a bug report done today, the following is what I
have just had returned:
SELinux is preventing /usr/sbin/cupsd from using the 'transition' accesses
on a process.
***** Plugin catchall (100. confidence) suggests
***************************
If you believe that cupsd should be allowed transition access on processes
labeled cupsd_t by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep cupsd /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp
Additional Information:
Source Context system_u:system_r:cupsd_t:s0-s0:c0.c1023
Target Context system_u:system_r:cupsd_t:s0-s0:c0.c1023
Target Objects /usr/lib/cups/notifier/dbus [ process ]
Source cupsd
Source Path /usr/sbin/cupsd
Port <Unknown>
Host (removed)
Source RPM Packages cups-1.5.4-20.fc18.x86_64
Target RPM Packages cups-1.5.4-20.fc18.x86_64
Policy RPM selinux-policy-3.11.1-86.fc18.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name (removed)
Platform Linux (removed) 3.7.2-204.fc18.x86_64 #1 SMP
Wed
Jan 16 16:22:52 UTC 2013 x86_64 x86_64
Alert Count 3
First Seen 2013-03-31 11:56:30 PDT
Last Seen 2013-03-31 11:56:31 PDT
Local ID af46d3ea-017a-46e6-b6bd-00c9f11f0365
Raw Audit Messages
type=AVC msg=audit(1364756191.10:348): avc: denied { transition } for
pid=3457 comm="cupsd" path="/usr/lib/cups/notifier/dbus"
dev="dm-2"
ino=263939 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023
tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=process
type=SYSCALL msg=audit(1364756191.10:348): arch=x86_64 syscall=execve
success=no exit=EACCES a0=7fff18a45a10 a1=7fff18a45550 a2=7fff18a45570
a3=7fff18a449e0 items=0 ppid=1688 pid=3457 auid=4294967295 uid=4 gid=7
euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 ses=4294967295 tty=(none)
comm=cupsd exe=/usr/sbin/cupsd
subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
Hash: cupsd,cupsd_t,cupsd_t,process,transition
audit2allow
#============= cupsd_t ==============
allow cupsd_t self:process transition;
audit2allow -R
#============= cupsd_t ==============
allow cupsd_t self:process transition;
11:24 p.m.
On Mon, Apr 1, 2013 at 8:49 PM, Ed Greshko <Ed.Greshko(a)greshko.com> wrote:
33a63,64
> # All administration operations require an administrator
to
authenticate...
38a70,71
> # All printer operations require a printer operator to
authenticate...
43a77,78
> # Only the owner or an administrator can cancel or
authenticate a job...
47a83
51a88,89
> # Set the authenticated printer/job policies...
52a91
65a108,109
> # All administration operations require an administrator
to
authenticate...
70a115,116
> # All printer operations require a printer operator to
authenticate...
75a122,123
> # Only the owner or an administrator can cancel or
authenticate a job...
80a129
85,88c134,137
< JobPrivateAccess default
< JobPrivateValues default
< SubscriptionPrivateAccess default
< SubscriptionPrivateValues default
---
> #
> # End of "$Id: cupsd.conf.in 9407 2010-12-09 21:24:51Z mike $".
> #
# rpm -qa | grep ^cups
cups-pk-helper-0.2.4-1.fc18.x86_64
cups-1.5.4-20.fc18.x86_64
cups-libs-1.5.4-20.fc18.x86_64
On 04/02/13 11:03, Richard Vickery wrote:
> On Mon, Apr 1, 2013 at 3:31 PM, Ed Greshko <Ed.Greshko(a)greshko.com<mailto:
Ed.Greshko(a)greshko.com>> wrote:
> On 04/02/13 04:14, Richard Vickery wrote:
> > > >
> Now the printer clicks on to print a document, then, within a
tenth, or a hundredth, of a second, clicks as if printing were completed
without printing.
> Go to....
> http://localhost:631/printers/
> Then click on the link for your printer.
> Then click on the pull down menu for "Maintenance" and choose
"Print
Test Page".
> Then check /var/log/cups/error_log
> --
> From now on, at least during winter time, Im going to blame all
spelling an grammar erros on the cat sitting on my chest every time I sit
down at the computer....
> --
> In going to ...printers/ I get
an error page with the following:
> Oops! Google Chrome could
not connect to localhost:631
> where it won't let me
access the page; so then:
As root....
[root@meimei ~]# netstat -nap | grep cups
Also....
[root@meimei cups]# diff /etc/cups/cupsd.conf /etc/cups/cupsd.conf.default
And...
[root@meimei cups]# rpm -qa | grep ^cups
I had the printer unplugged on doing this; I took the computer into the
other room.
# netstat -nap | grep cups
udp 0 0 0.0.0.0:631 0.0.0.0:*
828/cupsd
unix 2 [ ACC ] STREAM LISTENING 15237 1/systemd
/var/run/cups/cups.sock
unix 3 [ ] STREAM CONNECTED 24575 828/cupsd
unix 3 [ ] STREAM CONNECTED 19324 828/cupsd
unix 3 [ ] STREAM CONNECTED 18454 828/cupsd
# diff /etc/cups/cupsd.conf /etc/cups/cupsd.conf.default
1a2,10
#
# "$Id: cupsd.conf.in 9407 2010-12-09 21:24:51Z mike $"
#
# Sample configuration file for the CUPS scheduler. See "man cupsd.conf"
for a
# complete description of this file.
#
# Log general information in error_log - change "warn" to "debug"
# for troubleshooting...
2a12,14
# Only listen for connections from the local machine.
Listen localhost:631
4c16,17
< Listen /var/run/cups/cups.sock
---
# Show shared printers on the local network.
8a22,23
# Default authentication type, when authentication is required...
9a25,26
# Web interface setting...
10a28,29
# Restrict access to the server...
13a33,34
# Restrict access to the admin pages...
16a38,39
# Restrict access to configuration files...
21a45,46
# Set the default printer/job policies...
22a48
# Job/subscription privacy...
26a53,54
# Job-related operations must be done by the owner or an
administrator...
29a58
# Job/subscription privacy...
56a96,97
# Job-related operations must be done by the owner or an
administrator...
60a102
4079
days inactive
4083
days old
27 comments
4 participants
participants (4)
-
Daniel J Walsh -
Ed Greshko -
Joe Zeff -
Richard Vickery