cups, /dev/fd

[Tom London <selinux comcast net>]

Running strict/enforcing, latest from Dan's tree.

Printing (say, from openoffice) yields:

Sep 16 18:01:39 fedora kernel: audit(1095382899.718:0): avc:  denied  { 
read } for  pid=10941 exe=/usr/bin/perl name=fd dev=tmpfs ino=2794 
scontext=system_u:system_r:cupsd_t tcontext=system_u:object_r:device_t 
tclass=lnk_file
Sep 16 18:01:39 fedora kernel: audit(1095382899.718:0): avc:  denied  { 
read } for  pid=10941 exe=/usr/bin/perl name=fd dev=tmpfs ino=2794 
scontext=system_u:system_r:cupsd_t tcontext=system_u:object_r:device_t 
tclass=lnk_file

inode 2794 is /dev/fd.

Make sense to add?
dontaudit cupsd_t device_t:lnk_file { read };

tom