SElinux and Brother printer driver problem on F8

[Bernd Bartmann]

On Wed, Jul 30, 2008 at 5:34 PM, Daniel J Walsh wrote:
> I will change the default labeling.
>
> /usr/local/Brother/inf(/.*)?
> gen_context(system_u:object_r:cupsd_rw_etc_t,s0)
>
> Is the current labeling.
>
> Is there a directory before inf?

Dan below you'll find the setup that works for me now. The RPMS from
Brother's web site setup two printer drivers
1. the fax printer driver which seems to be located directly under
/usr/local/Brother/...
2. the real printer driver which seems to be located under
/usr/local/Brother/Printer/mfc9840cdw/...
The part mfc9840cdw will probably change depending on the actual
printer that has been configured.

[bart at riker ~]$ ls -laRZ /usr/local/Brother/
/usr/local/Brother/:
drwxr-xr-x  root root system_u:object_r:usr_t:s0       .
drwxr-xr-x  root root system_u:object_r:usr_t:s0       ..
drwxr-xr-x  root root system_u:object_r:usr_t:s0       fax
drwxr-xr-x  root root system_u:object_r:cupsd_rw_etc_t:s0 inf
drwxr-xr-x  root root system_u:object_r:bin_t:s0       lpd
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   Printer
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   sane

/usr/local/Brother/fax:
drwxr-xr-x  root root system_u:object_r:usr_t:s0       .
drwxr-xr-x  root root system_u:object_r:usr_t:s0       ..
-rwxrwxrwx  root root system_u:object_r:usr_t:s0       brmfcfax.jar
-rwxrwxrwx  root root system_u:object_r:usr_t:s0       brps2brfax
-rw-rw-rw-  root root unconfined_u:object_r:usr_t:s0   txreport.log

/usr/local/Brother/inf:
drwxr-xr-x  root root system_u:object_r:cupsd_rw_etc_t:s0 .
drwxr-xr-x  root root system_u:object_r:usr_t:s0       ..
-rw-rw-rw-  root root system_u:object_r:cupsd_rw_etc_t:s0 brFAXrc
-rwxrwxrwx  root root system_u:object_r:cupsd_rw_etc_t:s0 setupPrintcap

/usr/local/Brother/lpd:
drwxr-xr-x  root root system_u:object_r:bin_t:s0       .
drwxr-xr-x  root root system_u:object_r:usr_t:s0       ..
-rwxrwxrwx  root root system_u:object_r:bin_t:s0       filterBRFAX

/usr/local/Brother/Printer:
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   .
drwxr-xr-x  root root system_u:object_r:usr_t:s0       ..
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   mfc9840cdw

/usr/local/Brother/Printer/mfc9840cdw:
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   .
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   ..
drwxr-xr-x  root root system_u:object_r:bin_t:s0       cupswrapper
drwxrwxrwx  root root unconfined_u:object_r:cupsd_etc_t:s0 inf
drwxr-xr-x  root root system_u:object_r:bin_t:s0       lpd

/usr/local/Brother/Printer/mfc9840cdw/cupswrapper:
drwxr-xr-x  root root system_u:object_r:bin_t:s0       .
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   ..
-rwxr-xr-x  root root system_u:object_r:bin_t:s0       brcupsconfcl1
-rwxr-xr-x  root root system_u:object_r:bin_t:s0       brlpdwrapper_mfc9840cdw
-rwxr-xr-x  root root system_u:object_r:bin_t:s0
cupswrapperSetup_mfc9840cdw

/usr/local/Brother/Printer/mfc9840cdw/inf:
drwxrwxrwx  root root unconfined_u:object_r:cupsd_etc_t:s0 .
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   ..
-rw-r--r--  root root system_u:object_r:cupsd_rw_etc_t:s0 brmfc9840cdwfunc
-rw-r--r--  root root system_u:object_r:cupsd_rw_etc_t:s0 brmfc9840cdwpos
-rw-rw-rw-  lp   lp   unconfined_u:object_r:cupsd_rw_etc_t:s0 brmfc9840cdwrc
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   lut
-rw-r--r--  root root system_u:object_r:cupsd_rw_etc_t:s0 paperinfij2
-rwxr-xr-x  root root system_u:object_r:cupsd_rw_etc_t:s0 setupPrintcapij

/usr/local/Brother/Printer/mfc9840cdw/inf/lut:
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   .
drwxrwxrwx  root root unconfined_u:object_r:cupsd_etc_t:s0 ..
-rw-r--r--  root root system_u:object_r:usr_t:s0       0600-c06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       0600-c_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       0600-c-TS_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       0600-k06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       0600-k_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       0600-k-TS_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       0600-m06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       0600-m_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       0600-m-TS_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       0600-y06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       0600-y_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       0600-y-TS_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       capt-c06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       capt-c_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       capt-c-TS_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       capt-k06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       capt-k_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       capt-k-TS_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       capt-m06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       capt-m_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       capt-m-TS_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       capt-y06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       capt-y_cache06.bin
-rw-r--r--  root root system_u:object_r:usr_t:s0       capt-y-TS_cache06.bin

/usr/local/Brother/Printer/mfc9840cdw/lpd:
drwxr-xr-x  root root system_u:object_r:bin_t:s0       .
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   ..
-rwxr-xr-x  root root system_u:object_r:bin_t:s0       brmfc9840cdwfilter
-rwxr-xr-x  root root system_u:object_r:bin_t:s0       filtermfc9840cdw
-rwxr-xr-x  root root system_u:object_r:bin_t:s0       psconvertij2

/usr/local/Brother/sane:
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   .
drwxr-xr-x  root root system_u:object_r:usr_t:s0       ..
-rw-r--r--  root root system_u:object_r:usr_t:s0       Brsane2.ini
-rwxr-xr-x  root root system_u:object_r:usr_t:s0       brsaneconfig2
-rw-rw-rw-  root root system_u:object_r:usr_t:s0       brsanenetdevice2.cfg
-rw-r--r--  root root unconfined_u:object_r:usr_t:s0   brscan_mail.config
-rw-r--r--  root root unconfined_u:object_r:usr_t:s0   brscan_mailmessage.txt
-rwxr-xr-x  root root system_u:object_r:usr_t:s0       brscan-skey-0.2.1-1
-rw-r--r--  root root unconfined_u:object_r:usr_t:s0   brscan-skey-0.2.1-1.cfg
-rwxr-xr-x  root root system_u:object_r:usr_t:s0       brscan-skey-0.2.1-1.sh
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   GrayCmData
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   models2
drwxr-xr-x  root root system_u:object_r:usr_t:s0       script
-rwxr-xr-x  root root system_u:object_r:usr_t:s0       setupSaneScan2

/usr/local/Brother/sane/GrayCmData:
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   .
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   ..
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   AL
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   ALL

/usr/local/Brother/sane/GrayCmData/AL:
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   .
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   ..
-rw-r--r--  root root system_u:object_r:usr_t:s0       brmsl09f.cm

/usr/local/Brother/sane/GrayCmData/ALL:
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   .
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   ..
-rw-r--r--  root root system_u:object_r:usr_t:s0       brmsl08f.cm

/usr/local/Brother/sane/models2:
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   .
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   ..
-rw-r--r--  root root system_u:object_r:usr_t:s0       ext1.ini

/usr/local/Brother/sane/script:
drwxr-xr-x  root root system_u:object_r:usr_t:s0       .
drwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   ..
-rwxr-xr-x  root root system_u:object_r:usr_t:s0
brscan_scantoemail-0.2.1-1
-rw-r--r--  root root unconfined_u:object_r:usr_t:s0   scantoemail-0.2.1-1.sh
-rwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   scantofile-0.2.1-1.sh
-rwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   scantoimage-0.2.1-1.sh
-rwxr-xr-x  root root unconfined_u:object_r:usr_t:s0   scantoocr-0.2.1-1.sh

Best regards,
Bernd.