-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 06/06/2011 08:41 AM, Ed Greshko wrote:
On 06/06/2011 08:19 PM, Lawrence E Graves wrote:
SELinux is preventing /usr/libexec/colord from getattr access on the file /usr/local/Brother/sane/models3/ext4.ini.
So, you've installed a package supplied by Brother...and not from the Fedora repository. So, it is certainly possible/probably that it will run afoul of some Selinux policies.
If you want to allow access, you should do as the selinux report suggests and generate a local policy module.
Actually this is probably a labeling problem. Could you get me a listing of files under /usr/local/Brother. We have labeled lots of files under this directory as bin_t, but now we see where this is additional config under the directory. I basically need to know where the executables are stored under Brother and then we can label the rest of the content as usr_t and SELinux will not block it.
chcon -Rt usr_t /usr/local/Brother/sane
Will solve the problem for now.