cups-pdf

[Daniel J Walsh]

On 05/04/2014 06:27 PM, Patrick Dupre wrote:
>
>> ----- Original Message -----
>> From: Steven Stern
>> Sent: 05/05/14 12:03 AM
>> To: Community support for Fedora users
>> Subject: Re: cups-pdf
>>
>> On 05/04/2014 04:57 PM, Patrick Dupre wrote:
>>>
>>>> ----- Original Message -----
>>>> From: Steven Stern
>>>> Sent: 05/04/14 11:53 PM
>>>> To: Community support for Fedora users
>>>> Subject: Re: cups-pdf
>>>>
>>>> On 05/04/2014 04:48 PM, Patrick Dupre wrote:
>>>>>>> When I try to use cups-pdf to generate pdf file, I have no output.
>>>>>>> /var/log//cups/cups-pdf_log
>>>>>>> shows an error:
>>>>>>>
>>>>>>> Sun May 4 23:22:44 2014 [ERROR] ghostscript reported an error (256)
>>>>>>> Sun May 4 23:22:44 2014 [ERROR] failed to set file mode for PDF file (non fatal) (/home/pdupre/Desktop/NICE-OHMS_v2.pdf)
>>>>>>>
>>>>>>> I did not find the solution on internet!
>>>>>>>
>>>>>>> Thank for your help.
>>>>>>>
>>>>>> Is SELinux in enforcing mode?
>>>>> Yes, If I switch to permissive then the pdf file is generated.
>>>>>
>>>>> But on another machine, the file generation is OK even in enforced mode!
>>>>> (BOTH fc20).
>>>> Well, there you go! Either you once created an overriding policy or...
>>>>
>>> How do I do this?
>> sealert should offer to show you how to create a policy to allow it. Do
>> you have the setroubleshootd daemon running?
> Yes, I think so.
> It is running, but it does not report any alert!
>
> Now it works,
> Thank.
>
>> sealert -a /var/log/audit
>>
>> or
>>
>> sudo grep pdf /var/log/audit/audit.log | audit2allow -M mypol
>> sudo semodule -i mypol.pp
>>
>>
>> -- 
>> -- Steve
>> -- 
>> users mailing list
>> users at lists.fedoraproject.org
>> To unsubscribe or change subscription options:
>> https://admin.fedoraproject.org/mailman/listinfo/users
>> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
>> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
>> Have a question? Ask away: http://ask.fedoraproject.org
>
> ===========================================================================
>  Patrick DUPRÉ                                 | | email: pdupre at gmx.com
>  Laboratoire de Physico-Chimie de l'Atmosphère | |
>  Université du Littoral-Côte d'Opale           | |
>  Tel.  (33)-(0)3 28 23 76 12                   | | Fax: 03 28 65 82 44
>  189A, avenue Maurice Schumann                 | | 59140 Dunkerque, France
> ===========================================================================

After cups-pdf is denied execute

audit2allow -m avc -ts recent -i

If this does not generate any AVC's then try with "semodule -DB" then
run the test again.

semodule -DB will disable dontaudit rules.

semodule -B will turn them back on.