cups.te: ptal_t needs to read usbfs_t

Tom London selinux at gmail.com
Sat Sep 25 18:03:43 UTC 2004


When hpoj starts, it produces the following:

Sep 25 10:28:24 fedora kernel: audit(1096133304.072:0): avc:  denied 
{ read } for  pid=2769 exe=/usr/sbin/ptal-mlcd dev=usbfs ino=2309
scontext=system_u:system_r:ptal_t tcontext=system_u:object_r:usbfs_t
tclass=dir

ptal_t already has  'r_dir_file(ptal_t, usbdevfs_t)'.
Suggest adding 'r_dir_file(ptal_t, usbfs_t)'

[Are both still needed?]
   tom

--- cups.te     2004-09-23 11:02:38.000000000 -0700
+++ /tmp/cups.te        2004-09-25 10:57:11.147771270 -0700
@@ -156,6 +156,7 @@
 allow ptal_t printer_device_t:chr_file { ioctl read write };
 allow ptal_t { etc_t etc_runtime_t }:file { getattr read };
 r_dir_file(ptal_t, usbdevfs_t)
+r_dir_file(ptal_t, usbfs_t)
 allow cupsd_t ptal_var_run_t:sock_file { write setattr };
 allow cupsd_t ptal_t:unix_stream_socket { connectto };
 allow cupsd_t ptal_var_run_t:dir { search };



-- 
Tom London



More information about the fedora-selinux-list mailing list