----- Original Message ----- > From: "Dr. Michael J. Chudobiak" <mjc@xxxxxxxxxxxxxxx> > To: selinux@xxxxxxxxxxxxxxxxxxxxxxx > Sent: Thursday, November 5, 2015 1:09:07 PM > Subject: invalid security context, lpr_t > > Hi, > > I've installed the Citrix Receiver rpm > (https://www.citrix.com/downloads/citrix-receiver/linux.html). The > citrix client runs, but doesn't see the local printers. The messages in > the audit log are not of the "normal" type, in my limited experience: > > > [root@daisy files]# audit2allow -a > libsepol.context_from_record: invalid security context: > "unconfined_u:unconfined_r:lpr_t:s0-s0:c0.c1023" > libsepol.context_from_record: could not create context structure > libsepol.context_from_string: could not create context structure > libsepol.sepol_context_to_sid: could not convert > unconfined_u:unconfined_r:lpr_t:s0-s0:c0.c1023 to sid > libsepol.context_from_record: invalid security context: > "unconfined_u:unconfined_r:lpr_t:s0-s0:c0.c1023" > libsepol.context_from_record: could not create context structure > libsepol.context_from_string: could not create context structure > libsepol.sepol_context_to_sid: could not convert > unconfined_u:unconfined_r:lpr_t:s0-s0:c0.c1023 to sid > > > It works fine in permissive mode. > > Any pointers on how to fix this? > This should be part of the lpd policy file shipped in selinux-policy-targeted rpm -ql selinux-policy-targeted | grep -i lpd or semodule -l | grep -i lpd > > - Mike > -- > selinux mailing list > selinux@xxxxxxxxxxxxxxxxxxxxxxx > https://admin.fedoraproject.org/mailman/listinfo/selinux -- Simon Sekidde * Red Hat, Inc. * Westford, MA gpg: 5848 958E 73BA 04D3 7C06 F096 1BA1 2DBF 94BC 377E -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
