Craig White wrote:
On Thu, 2006-01-26 at 14:38 +0000, Paul Howarth wrote:
Craig White wrote:
My main desktop, I was trying to upgrade from FC-3 to FC-4.
I was a little short of space in /usr partition so I moved /usr/share
to /home/share and symlinked it back.
This seemed all and good but that does cause a cups issue.
the only clues I ever get are...
E [26/Jan/2006:07:02:22 -0700] LoadBanners: Unable to open banner
directory "/usr/share/cups/banners": Permission denied
/var/log/cups/error_log
E [26/Jan/2006:07:02:22 -0700] LoadPPDs: Unable to open PPD directory
"/usr/share/cups/model": Permission denied
but those directories **seem to be ok**
# ls -Zld /usr/share/cups/model /usr/share/cups/banners/
drwxr-xr-x 2 system_u:object_r:cupsd_etc_t root root 4096 Jan 16
18:29 /usr/share/cups/banners/
drwxr-xr-x 2 system_u:object_r:cupsd_etc_t root root 4096 Jan 16
18:29 /usr/share/cups/model
on my CentOS-4 system...they are different
# ls -Zld /usr/share/cups/model /usr/share/cups/banners/
drwxr-xr-x 2 system_u:object_r:usr_t root root 4096 Dec 27
07:12 /usr/share/cups/banners/
drwxr-xr-x 2 system_u:object_r:usr_t root root 4096 Dec 27
07:12 /usr/share/cups/model
Everything under /usr/share/cups is system_u:object_r:cupsd_etc_t on my
FC4 boxes. What are the actual AVCs you're getting?
# ausearch -m avc,selinux_err
----
for the purposes of brevity, I will only paste in the first
record...there are probably as many returned as there are files in
the /usr/share/cups tree like this...
time->Mon Jan 16 16:33:00 2006
type=PATH msg=audit(1137454380.947:5): item=0
name="/usr/share/printconf/util" flags=1 inode=2 dev=03:02 mode=040755
ouid=0 ogid=0 rdev=00:00
type=CWD msg=audit(1137454380.947:5): cwd="/"
type=SYSCALL msg=audit(1137454380.947:5): arch=40000003 syscall=195
success=no exit=-13 a0=bfa5a5b6 a1=bfa5a9b8 a2=b1eff4 a3=b7ec890c
items=1 pid=1974 aui
d=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
comm="printconf-backe" exe="/usr/bin/python"
type=AVC msg=audit(1137454380.947:5): avc: denied { read } for
pid=1974 comm="printconf-backe" name="share" dev=hda2 ino=12
scontext=system_u:system_r:
cupsd_config_t tcontext=system_u:object_r:usr_t tclass=lnk_file
It seems to be having problems with your symlink. Could you try doing a
bind mount instead:
# mount --bind /home/share /usr/share
Paul.
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
