Product: Fedora Version: 11 Component: selinux-policy Christian Groove <groovie@xxxxxxxxxxxxxxx> has denied fedora_requires_release_note: Bug 523015: hp printer setup impossible due to selinux-policy https://bugzilla.redhat.com/show_bug.cgi?id=523015 ------- Additional Comments from Christian Groove <groovie@xxxxxxxxxxxxxxx> Description of problem: Current selinux-policy-3.6.12-82.fc11 does not allows me to configure my hp-printer, so no printer is working. Version-Release number of selected component (if applicable): + selinux-policy-3.6.12-82.fc11 How reproducible: anytime! Steps to Reproduce: 1. attache USB cable 2. wait until printer icon appears in gome app bar 3. and click it Actual results: Troubleshoot browser pops up with: ======================================================================== ZusammenfassungSELinux is preventing python (hplip_t) "read" var_lib_t. Detaillierte BeschreibungSELinux denied access requested by python. It is not expected that this access is required by python and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Zugriff erlaubenYou can generate a local policy module to allow this access - see FAQ Or you can disable SELinux protection altogether. Disabling SELinux protection is not recommended. Please file a bug report against this package. Zusätzliche InformationenQuellkontext: system_u:system_r:hplip_t:s0Zielkontext: system_u:object_r:var_lib_t:s0Zielobjekte: hplip.state [ file ]Quelle: pythonQuellen-Pfad: /usr/bin/pythonPort: <Unbekannt>Host: suggsQuellen-RPM-Pakete: python-2.6-9.fc11Ziel-RPM-Pakete: RPM-Richtlinie: selinux-policy-3.6.12-82.fc11SELinux aktiviert: TrueRichtlinienversion: targetedMLS aktiviert: TrueEnforcing-Modus: EnforcingPlugin-Name: catchallHostname: suggsPlattform: Linux suggs 2.6.30.5-43.fc11.x86_64 #1 SMP Thu Aug 27 21:39:52 EDT 2009 x86_64 x86_64Anzahl der Alarme: 10Zuerst gesehen: So 06 Sep 2009 16:24:18 CESTZuletzt gesehen: So 13 Sep 2009 11:46:06 CESTLokale ID: ee0d00f7-b90e-47b5-86ce-da23c10c8e73Zeilennummern: Raw-Audit-Meldungen :node=suggs type=AVC msg=audit(1252835166.396:15): avc: denied { read } for pid=2399 comm="python" name="hplip.state" dev=sda6 ino=1220999 scontext=system_u:system_r:hplip_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file node=suggs type=SYSCALL msg=audit(1252835166.396:15): arch=c000003e syscall=2 success=no exit=-13 a0=1f47180 a1=0 a2=1b6 a3=238 items=0 ppid=2393 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="python" exe="/usr/bin/python" subj=system_u:system_r:hplip_t:s0 key=(null) ========================================================================= Expected results: configured printer (hp1020 works never with my Fefora buuu) Additional info: -- Fedora-relnotes-content mailing list Fedora-relnotes-content@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-relnotes-content