View Issue Details

IDProjectCategoryView StatusLast Update
0015998CentOS-7selinux-policypublic2019-04-08 18:35
Reporterrkorol 
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
PlatformOSOS Version7
Product Version 
Target VersionFixed in Version 
Summary0015998: SELinux is preventing /usr/bin/brprintconf_hll8260cdw from 'execute' accesses on the file /etc/ld.so.cache.
DescriptionDescription of problem:
I installed a new printer and printed a test page.
SELinux is preventing /usr/bin/brprintconf_hll8260cdw from 'execute' accesses on the file /etc/ld.so.cache.

***** Plugin catchall (100. confidence) suggests **************************

If you believe that brprintconf_hll8260cdw should be allowed execute access on the ld.so.cache file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'brprintconf_hll' --raw | audit2allow -M my-brprintconfhll
# semodule -i my-brprintconfhll.pp

Additional Information:
Source Context system_u:system_r:cupsd_t:s0-s0:c0.c1023
Target Context unconfined_u:object_r:ld_so_cache_t:s0
Target Objects /etc/ld.so.cache [ file ]
Source brprintconf_hll
Source Path /usr/bin/brprintconf_hll8260cdw
Port <Unknown>
Host (removed)
Source RPM Packages
Target RPM Packages glibc-2.17-260.el7_6.3.x86_64
                              glibc-2.17-260.el7_6.3.i686
Policy RPM selinux-policy-3.13.1-229.el7_6.9.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name (removed)
Platform Linux (removed) 3.10.0-957.10.1.el7.x86_64 #1 SMP
                              Mon Mar 18 15:06:45 UTC 2019 x86_64 x86_64
Alert Count 19
First Seen 2019-04-08 11:30:27 PDT
Last Seen 2019-04-08 11:30:29 PDT
Local ID 6da912ed-1570-48e0-8259-7f8b427d332e

Raw Audit Messages
type=AVC msg=audit(1554748229.75:22878): avc: denied { execute } for pid=13486 comm="brhll8260cdwfil" path="/etc/ld.so.cache" dev="dm-0" ino=69865879 scontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:ld_so_cache_t:s0 tclass=file permissive=0


Hash: brprintconf_hll,cupsd_t,ld_so_cache_t,file,execute

Version-Release number of selected component:
selinux-policy-3.13.1-229.el7_6.9.noarch
Additional Informationreporter: libreport-2.1.11.1
hashmarkername: setroubleshoot
kernel: 3.10.0-957.10.1.el7.x86_64
reproducible: Not sure how to reproduce the problem
type: libreport
TagsNo tags attached.
abrt_hash7a01c92c2330ea599e6321dbc33cdc68cea42c875ce55139d03c289b0a5fb22c
URL

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2019-04-08 18:35 rkorol New Issue