Re: cups-pdf

[Patrick Dupre]

> ----- Original Message -----
> From: Steven Stern
> Sent: 05/05/14 12:03 AM
> To: Community support for Fedora users
> Subject: Re: cups-pdf
>
> On 05/04/2014 04:57 PM, Patrick Dupre wrote:
> > > ----- Original Message -----
> > > From: Steven Stern
> > > Sent: 05/04/14 11:53 PM
> > > To: Community support for Fedora users
> > > Subject: Re: cups-pdf
> > >
> > > On 05/04/2014 04:48 PM, Patrick Dupre wrote:
> > > > > > When I try to use cups-pdf to generate pdf file, I have no output.
> > > > > > /var/log//cups/cups-pdf_log
> > > > > > shows an error:
> > > > > >
> > > > > > Sun May 4 23:22:44 2014 [ERROR] ghostscript reported an error (256)
> > > > > > Sun May 4 23:22:44 2014 [ERROR] failed to set file mode for PDF file (non fatal) (/home/pdupre/Desktop/NICE-OHMS_v2.pdf)
> > > > > >
> > > > > > I did not find the solution on internet!
> > > > > >
> > > > > > Thank for your help.
> > > > >
> > > > > Is SELinux in enforcing mode?
> > > >
> > > > Yes, If I switch to permissive then the pdf file is generated.
> > > >
> > > > But on another machine, the file generation is OK even in enforced mode!
> > > > (BOTH fc20).
> > >
> > > Well, there you go! Either you once created an overriding policy or...
> >
> > How do I do this?
>
> sealert should offer to show you how to create a policy to allow it. Do
> you have the setroubleshootd daemon running?

Yes, I think so.
It is running, but it does not report any alert!

Now it works,
Thank.
> sealert -a /var/log/audit
>
> or
>
> sudo grep pdf /var/log/audit/audit.log | audit2allow -M mypol
> sudo semodule -i mypol.pp
>
> --
> -- Steve
>
> users mailing list
> [e-mail]
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> Have a question? Ask away: http://ask.fedoraproject.org

===========================================================================
 Patrick DUPRÉ                                 | | email: [e-mail]
 Laboratoire de Physico-Chimie de l'Atmosphère | |
 Université du Littoral-Côte d'Opale           | |
 Tel.  (33)-(0)3 28 23 76 12                   | | Fax: [phone]
 189A, avenue Maurice Schumann                 | | 59140 Dunkerque, France
===========================================================================

cups-pdf

[Daniel J Walsh]

On 05/04/2014 06:27 PM, Patrick Dupre wrote:
> > ----- Original Message -----
> > From: Steven Stern
> > Sent: 05/05/14 12:03 AM
> > To: Community support for Fedora users
> > Subject: Re: cups-pdf
> >
> > On 05/04/2014 04:57 PM, Patrick Dupre wrote:
> > > > ----- Original Message -----
> > > > From: Steven Stern
> > > > Sent: 05/04/14 11:53 PM
> > > > To: Community support for Fedora users
> > > > Subject: Re: cups-pdf
> > > >
> > > > On 05/04/2014 04:48 PM, Patrick Dupre wrote:
> > > > > > > When I try to use cups-pdf to generate pdf file, I have no output.
> > > > > > > /var/log//cups/cups-pdf_log
> > > > > > > shows an error:
> > > > > > >
> > > > > > > Sun May 4 23:22:44 2014 [ERROR] ghostscript reported an error (256)
> > > > > > > Sun May 4 23:22:44 2014 [ERROR] failed to set file mode for PDF file (non fatal) (/home/pdupre/Desktop/NICE-OHMS_v2.pdf)
> > > > > > >
> > > > > > > I did not find the solution on internet!
> > > > > > >
> > > > > > > Thank for your help.
> > > > > > >
> > > > > > Is SELinux in enforcing mode?
> > > > >
> > > > > Yes, If I switch to permissive then the pdf file is generated.
> > > > >
> > > > > But on another machine, the file generation is OK even in enforced mode!
> > > > > (BOTH fc20).
> > > >
> > > > Well, there you go! Either you once created an overriding policy or...
> > >
> > > How do I do this?
> >
> > sealert should offer to show you how to create a policy to allow it. Do
> > you have the setroubleshootd daemon running?
>
> Yes, I think so.
> It is running, but it does not report any alert!
>
> Now it works,
> Thank.
> > sealert -a /var/log/audit
> >
> > or
> >
> > sudo grep pdf /var/log/audit/audit.log | audit2allow -M mypol
> > sudo semodule -i mypol.pp
> >
> > --
> > -- Steve
> >
> > users mailing list
> > [e-mail]
> > To unsubscribe or change subscription options:
> > https://admin.fedoraproject.org/mailman/listinfo/users
> > Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> > Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> > Have a question? Ask away: http://ask.fedoraproject.org
>
> ===========================================================================
>  Patrick DUPRÉ                                 | | email: [e-mail]
>  Laboratoire de Physico-Chimie de l'Atmosphère | |
>  Université du Littoral-Côte d'Opale           | |
>  Tel.  (33)-(0)3 28 23 76 12                   | | Fax: [phone]
>  189A, avenue Maurice Schumann                 | | 59140 Dunkerque, France
> ===========================================================================

After cups-pdf is denied execute

audit2allow -m avc -ts recent -i

If this does not generate any AVC's then try with "semodule -DB" then
run the test again.

semodule -DB will disable dontaudit rules.

semodule -B will turn them back on.