Product: Fedora
Version: 11
Component: selinux-policy
Christian Groove <groovie(a)groovesytems.de> has denied
fedora_requires_release_note:
Bug 523015: hp printer setup impossible due to selinux-policy
https://bugzilla.redhat.com/show_bug.cgi?id=523015
------- Additional Comments from Christian Groove <groovie(a)groovesytems.de>
Description of problem:
Current selinux-policy-3.6.12-82.fc11 does not allows
me to configure my hp-printer, so no printer is working.
Version-Release number of selected component (if applicable):
+ selinux-policy-3.6.12-82.fc11
How reproducible:
anytime!
Steps to Reproduce:
1. attache USB cable
2. wait until printer icon appears in gome app bar
3. and click it
Actual results:
Troubleshoot browser pops up with:
========================================================================
ZusammenfassungSELinux is preventing python (hplip_t) "read" var_lib_t.
Detaillierte BeschreibungSELinux denied access requested by python. It is not
expected that this access is required by python and this access may signal an
intrusion attempt. It is also possible that the specific version or
configuration of the application is causing it to require additional access.
Zugriff erlaubenYou can generate a local policy module to allow this access -
see FAQ Or you can disable SELinux protection altogether. Disabling SELinux
protection is not recommended. Please file a bug report against this package.
Zusätzliche InformationenQuellkontext:
system_u:system_r:hplip_t:s0Zielkontext:
system_u:object_r:var_lib_t:s0Zielobjekte: hplip.state [ file ]Quelle:
pythonQuellen-Pfad: /usr/bin/pythonPort: <Unbekannt>Host:
suggsQuellen-RPM-Pakete: python-2.6-9.fc11Ziel-RPM-Pakete: RPM-Richtlinie:
selinux-policy-3.6.12-82.fc11SELinux aktiviert: TrueRichtlinienversion:
targetedMLS aktiviert: TrueEnforcing-Modus: EnforcingPlugin-Name:
catchallHostname: suggsPlattform: Linux suggs 2.6.30.5-43.fc11.x86_64 #1 SMP
Thu Aug 27 21:39:52 EDT 2009 x86_64 x86_64Anzahl der Alarme: 10Zuerst gesehen:
So 06 Sep 2009 16:24:18 CESTZuletzt gesehen: So 13 Sep 2009 11:46:06
CESTLokale ID: ee0d00f7-b90e-47b5-86ce-da23c10c8e73Zeilennummern:
Raw-Audit-Meldungen :node=suggs type=AVC msg=audit(1252835166.396:15): avc:
denied { read } for pid=2399 comm="python" name="hplip.state"
dev=sda6
ino=1220999 scontext=system_u:system_r:hplip_t:s0
tcontext=system_u:object_r:var_lib_t:s0 tclass=file node=suggs type=SYSCALL
msg=audit(1252835166.396:15): arch=c000003e syscall=2 success=no exit=-13
a0=1f47180 a1=0 a2=1b6 a3=238 items=0 ppid=2393 pid=2399 auid=4294967295 uid=0
gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295
comm="python" exe="/usr/bin/python" subj=system_u:system_r:hplip_t:s0
key=(null)
=========================================================================
Expected results:
configured printer (hp1020 works never with my Fefora buuu)
Additional info: