Running latest Rawhide, I get the following when configuring a printer inside of Cups web interface (localhost:631):
type=AVC msg=audit(1187113075.195:823): avc: denied { getattr } for pid=20531 comm="hp" path="/usr/share/snmp/mibs/.index" dev=dm-0 ino=9240602 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:snmpd_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1187113075.195:823): arch=40000003 syscall=195 success=yes exit=0 a0=bfef1ab8 a1=bfef179c a2=9e0ff4 a3=3a items=0 ppid=14556 pid=20531 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="hp" exe="/usr/lib/cups/backend/hp" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1187113075.195:824): avc: denied { read } for pid=20531 comm="hp" name=".index" dev=dm-0 ino=9240602 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:snmpd_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1187113075.195:824): arch=40000003 syscall=5 success=yes exit=5 a0=bfef1ab8 a1=8000 a2=1b6 a3=87f6f30 items=0 ppid=14556 pid=20531 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="hp" exe="/usr/lib/cups/backend/hp" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
Tom London wrote:
Running latest Rawhide, I get the following when configuring a printer inside of Cups web interface (localhost:631):
type=AVC msg=audit(1187113075.195:823): avc: denied { getattr } for pid=20531 comm="hp" path="/usr/share/snmp/mibs/.index" dev=dm-0 ino=9240602 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:snmpd_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1187113075.195:823): arch=40000003 syscall=195 success=yes exit=0 a0=bfef1ab8 a1=bfef179c a2=9e0ff4 a3=3a items=0 ppid=14556 pid=20531 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="hp" exe="/usr/lib/cups/backend/hp" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1187113075.195:824): avc: denied { read } for pid=20531 comm="hp" name=".index" dev=dm-0 ino=9240602 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:snmpd_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1187113075.195:824): arch=40000003 syscall=5 success=yes exit=5 a0=bfef1ab8 a1=8000 a2=1b6 a3=87f6f30 items=0 ppid=14556 pid=20531 auid=500 uid=4 gid=7 euid=4 suid=4 fsuid=4 egid=7 sgid=7 fsgid=7 tty=(none) comm="hp" exe="/usr/lib/cups/backend/hp" subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 key=(null)
Any idea why the hp command would want to look at the snmp
path="/usr/share/snmp/mibs/.index"
Or is this a leaked file descriptor from somewhere?
On Wed, 2007-08-15 at 07:02 -0400, Daniel J Walsh wrote:
Any idea why the hp command would want to look at the snmp
path="/usr/share/snmp/mibs/.index"
Or is this a leaked file descriptor from somewhere?
HPLIP, in the form of the CUPS hp backend here, is capable of using SNMP to determine characteristics of networked printers.
Tim. */
Tim Waugh wrote:
On Wed, 2007-08-15 at 07:02 -0400, Daniel J Walsh wrote:
Any idea why the hp command would want to look at the snmp
path="/usr/share/snmp/mibs/.index"
Or is this a leaked file descriptor from somewhere?
HPLIP, in the form of the CUPS hp backend here, is capable of using SNMP to determine characteristics of networked printers.
Tim. */
Thanks Tim, I will add the policy to allow hplib to read.
selinux@lists.fedoraproject.org