SELinux is preventing /usr/bin/brprintconf_mfcj615w from write access on the None /opt/brother/Printers/mfcj615w/inf.

Lawrence Graves <lgraves95@xxxxxxxxx> · Fri, 27 Jan 2012 12:41:11 -0700



    SELinux is preventing /usr/bin/brprintconf_mfcj615w from write
    access on the None /opt/brother/Printers/mfcj615w/inf.
    

    ***** Plugin catchall (100. confidence) suggests
    ***************************
    

    If you believe that brprintconf_mfcj615w should be allowed write
    access on the inf <Unknown> by default.
    

    Then you should report this as a bug.
    

    You can generate a local policy module to allow this access.
    

    Do
    

    allow this access for now by executing:
    

    # grep brprintconf_mfc /var/log/audit/audit.log | audit2allow -M
    mypol
    

    # semodule -i mypol.pp
    

    Additional Information:
    

    Source Context system_u:system_r:cupsd_t:s0-s0:c0.c1023
    

    Target Context system_u:object_r:usr_t:s0
    

    Target Objects /opt/brother/Printers/mfcj615w/inf [ None ]
    

    Source brprintconf_mfc
    

    Source Path /usr/bin/brprintconf_mfcj615w
    

    Port <Unknown>
    

    Host Jehovah.localdomain
    

    Source RPM Packages 

    Target RPM Packages 

    Policy RPM <Unknown>
    

    Selinux Enabled True
    

    Policy Type targeted
    

    Enforcing Mode Enforcing
    

    Host Name Jehovah.localdomain
    

    Platform Linux Jehovah.localdomain 3.2.2-1.fc16.x86_64 #1
    

    SMP Thu Jan 26 03:21:58 UTC 2012 x86_64 x86_64
    

    Alert Count 19
    

    First Seen Fri 27 Jan 2012 12:37:43 PM MST
    

    Last Seen Fri 27 Jan 2012 12:37:43 PM MST
    

    Local ID 9fbde894-fedb-4cb3-8210-d98725ed29b7
    

    Raw Audit Messages
    

    type=AVC msg=audit(1327693063.259:264): avc: denied { write } for
    pid=7543 comm="brprintconf_mfc" name="inf" dev=dm-1 ino=281094
    scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023
    tcontext=system_u:object_r:usr_t:s0
    tclass=dirnode=Jehovah.localdomain type=SYSCALL
    msg=audit(1327693063.259:264): arch=40000003 syscall=38 per=400000
    success=no exit=4294967283 a0=fff0cf70 a1=fff0cb60 a2=804a4e0
    a3=fff0cf70 items=0 ppid=7522 pid=7543 auid=4294967295 uid=4 gid=7
    euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none)
    ses=4294967295 comm="brprintconf_mfc"
    exe="/usr/bin/brprintconf_mfcj615w"
    subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
    

    Hash: brprintconf_mfc,cupsd_t,usr_t,None,write
    

    audit2allow
    

    audit2allow -R

    -- 

      Lawrence Graves 
        All things are workable but don't all things work.
  

-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org