SELinux is preventing /usr/libexec/colord from getattr access on the file /usr/local/Brother/sane/models3/ext4.ini.

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/06/2011 08:41 AM, Ed Greshko wrote:
> On 06/06/2011 08:19 PM, Lawrence E Graves wrote:
>> SELinux is preventing /usr/libexec/colord from getattr access on the file /usr/local/Brother/sane/models3/ext4.ini.
> 
> So, you've installed a package supplied by Brother...and not from the 
> Fedora repository.  So, it is certainly possible/probably that it will 
> run afoul of some Selinux policies.
> 
> If you want to allow access, you should do as the selinux report 
> suggests and generate a local policy module.
Actually this is probably a labeling problem.  Could you get me a
listing of files under /usr/local/Brother.  We have labeled lots of
files under this directory as bin_t, but now we see where this is
additional config under the directory.   I basically need to know where
the executables are stored under Brother and then we can label the rest
of the content as usr_t and SELinux will not block it.

chcon -Rt usr_t /usr/local/Brother/sane

Will solve the problem for now.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk3s+DEACgkQrlYvE4MpobP3UgCgoDebMHLg3UUEPC2WbokHXBrG
1zsAn0l60NYP4KPckKnzdLAclaVf4+FC
=GEJi
-----END PGP SIGNATURE-----