/usr/share - self inflicted issue

[Paul Howarth]

Craig White wrote:
> On Thu, 2006-01-26 at 14:38 +0000, Paul Howarth wrote:
> 
>>Craig White wrote:
>>
>>>My main desktop, I was trying to upgrade from FC-3 to FC-4.
>>>
>>>I was a little short of space in /usr partition so I moved /usr/share
>>>to /home/share and symlinked it back.
>>>
>>>This seemed all and good but that does cause a cups issue.
>>>
>>>the only clues I ever get are...
>>>
>>>E [26/Jan/2006:07:02:22 -0700] LoadBanners: Unable to open banner
>>>directory "/usr/share/cups/banners": Permission denied
>>>
>>>/var/log/cups/error_log
>>>E [26/Jan/2006:07:02:22 -0700] LoadPPDs: Unable to open PPD directory
>>>"/usr/share/cups/model": Permission denied
>>>
>>>but those directories **seem to be ok**
>>>
>>># ls -Zld /usr/share/cups/model /usr/share/cups/banners/
>>>drwxr-xr-x  2 system_u:object_r:cupsd_etc_t    root root 4096 Jan 16
>>>18:29 /usr/share/cups/banners/
>>>drwxr-xr-x  2 system_u:object_r:cupsd_etc_t    root root 4096 Jan 16
>>>18:29 /usr/share/cups/model
>>>
>>>on my CentOS-4 system...they are different
>>># ls -Zld /usr/share/cups/model /usr/share/cups/banners/
>>>drwxr-xr-x  2 system_u:object_r:usr_t          root root 4096 Dec 27
>>>07:12 /usr/share/cups/banners/
>>>drwxr-xr-x  2 system_u:object_r:usr_t          root root 4096 Dec 27
>>>07:12 /usr/share/cups/model
>>
>>Everything under /usr/share/cups is system_u:object_r:cupsd_etc_t on my 
>>FC4 boxes. What are the actual AVCs you're getting?
>>
>># ausearch -m avc,selinux_err
> 
> ----
> for the purposes of brevity, I will only paste in the first
> record...there are probably as many returned as there are files in
> the /usr/share/cups tree like this...
> 
> time->Mon Jan 16 16:33:00 2006
> type=PATH msg=audit(1137454380.947:5): item=0
> name="/usr/share/printconf/util" flags=1  inode=2 dev=03:02 mode=040755
> ouid=0 ogid=0 rdev=00:00
> type=CWD msg=audit(1137454380.947:5):  cwd="/"
> type=SYSCALL msg=audit(1137454380.947:5): arch=40000003 syscall=195
> success=no exit=-13 a0=bfa5a5b6 a1=bfa5a9b8 a2=b1eff4 a3=b7ec890c
> items=1 pid=1974 aui
> d=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
> comm="printconf-backe" exe="/usr/bin/python"
> type=AVC msg=audit(1137454380.947:5): avc:  denied  { read } for
> pid=1974 comm="printconf-backe" name="share" dev=hda2 ino=12
> scontext=system_u:system_r:
> cupsd_config_t tcontext=system_u:object_r:usr_t tclass=lnk_file

It seems to be having problems with your symlink. Could you try doing a 
bind mount instead:

# mount --bind /home/share /usr/share

Paul.