Re: printer AVCs....

[Daniel J Walsh]

Tom London wrote:
>  Running latest Rawhide, targeted/enforcing.
>
>  I get the following when 'deactivating/activating' a USB printer (and
>  printing fails):
>
>  type=AVC msg=audit(1148052935.119:30): avc:  denied  { create } for
>  pid=1902 comm="python" scontext=system_u:system_r:hplip_t:s0
>  tcontext=system_u:system_r:hplip_t:s0 tclass=netlink_route_socket
>  type=SYSCALL msg=audit(1148052935.119:30): arch=40000003 syscall=102
>  success=no exit=-13 a0=1 a1=bffa4878 a2=49ebaff4 a3=bffa4e69 items=0
>  pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
>  sgid=0 fsgid=0 tty=(none) comm="python" exe="/usr/bin/python"
>  subj=system_u:system_r:hplip_t:s0
>  type=SOCKETCALL msg=audit(1148052935.119:30): nargs=3 a0=10 a1=3 a2=0
>
>  type=USER_AVC msg=audit(1148053114.333:32): user pid=1735 uid=81
>  auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:
>  denied  { send_msg } for msgtype=signal
>  interface=com.redhat.PrinterSpooler member=JobQueuedLocal
>  dest=org.freedesktop.DBus spid=1913 tpid=2748
>  scontext=system_u:system_r:cupsd_t:SystemLow-SystemHigh
>  tcontext=user_u:system_r:unconfined_execmem_t tclass=dbus : exe="?"
>  (sauid=81, hostname=?, addr=?, terminal=?)'
>  
What is the unconfined_execmem_t application?
>  The following messages were in /var/log/messages:
>
>  May 19 08:35:33 localhost dbus: Can't send to audit system: USER_AVC
>  avc:  denied  { send_msg } for msgtype=signal
>  interface=com.redhat.PrinterSpooler member=JobQueuedLocal
>  dest=org.freedesktop.DBus spid=1913 tpid=2748
>  scontext=system_u:system_r:cupsd_t:SystemLow-SystemHigh
>  tcontext=user_u:system_r:unconfined_execmem_t tclass=dbus : exe="?"
>  (sauid=81, hostname=?, addr=?, terminal=?)
>  May 19 08:35:33 localhost dbus: Can't send to audit system: USER_AVC
>  avc:  denied  { send_msg } for msgtype=signal
>  interface=com.redhat.PrinterSpooler member=QueueChanged
>  dest=org.freedesktop.DBus spid=1913 tpid=2748
>  scontext=system_u:system_r:cupsd_t:SystemLow-SystemHigh
>  tcontext=user_u:system_r:unconfined_execmem_t tclass=dbus : exe="?"
>  (sauid=81, hostname=?, addr=?, terminal=?)
>  May 19 08:35:33 localhost dbus: Can't send to audit system: USER_AVC
>  avc:  denied  { send_msg } for msgtype=signal
>  interface=com.redhat.PrinterSpooler member=JobStartedLocal
>  dest=org.freedesktop.DBus spid=1913 tpid=2748
>  scontext=system_u:system_r:cupsd_t:SystemLow-SystemHigh
>  tcontext=user_u:system_r:unconfined_execmem_t tclass=dbus : exe="?"
>  (sauid=81, hostname=?, addr=?, terminal=?)
>  May 19 08:35:35 localhost hpiod: invalid product id string: Broken
>  pipe io/hpiod/device.cpp 623
>  May 19 08:35:35 localhost hpiod: unable to Device::Open
>  hp:/usb/hp_LaserJet_1300?serial=00CNCB954325 io/hpiod/device.cpp 862
>  May 19 08:35:35 localhost hp_LaserJet_1300?serial=00CNCB954325: INFO:
>  open device failed; will retry in 30 seconds...
>  May 19 08:36:05 localhost hpiod: invalid product id string: Broken
>  pipe io/hpiod/device.cpp 623
>
>  tom