Tom London wrote:
Running targeted/enforcing, latest rawhide.
Just noticed the following in the log:
Apr 11 17:40:22 localhost kernel: audit(1113266422.034:0): avc: denied { search } for pid=2553 exe=/usr/sbin/cupsd name=dbus
dev=dm-0 ino=2142154 scontext=user_u:system_r:cupsd_t
tcontext=system_u:object_r:system_dbusd_var_run_t tclass=dir
Apr 11 17:40:22 localhost kernel: audit(1113266422.291:0): avc: denied { search } for pid=2553 exe=/usr/sbin/cupsd name=dbus
dev=dm-0 ino=2142154 scontext=user_u:system_r:cupsd_t
tcontext=system_u:object_r:system_dbusd_var_run_t tclass=dir
Apr 11 17:40:22 localhost kernel: audit(1113266422.295:0): avc: denied { search } for pid=2553 exe=/usr/sbin/cupsd name=dbus
dev=dm-0 ino=2142154 scontext=user_u:system_r:cupsd_t
tcontext=system_u:object_r:system_dbusd_var_run_t tclass=dir
Apr 11 17:40:22 localhost kernel: audit(1113266422.709:0): avc: denied { search } for pid=2561 exe=/usr/lib/cups/backend/hal
name=dbus dev=dm-0 ino=2142154 scontext=user_u:system_r:cupsd_t
tcontext=system_u:object_r:system_dbusd_var_run_t tclass=dir
or allow cupsd_t system_dbusd_var_run_t:dir search;
Did something change?
tom
This is strange I look at my policy sources
allow { cupsd_t } { var_run_t system_dbusd_var_run_t }:dir search;Are you running the latest policy?
Dan
--
-- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-selinux-list
