Comment 1 for bug 132969

Revision history for this message
Matt Zimmerman (mdz) wrote :

I see some errors as well, though I think it is perfectly reasonable to prevent cups from accessing these:

Aug 16 15:55:15 localhost kernel: [11674.312000] audit(1187276115.276:13): REJECTING access to capability 'dac_override' (cupsd(11088) profile /usr/sbin/cupsd active /usr/sbin/cupsd)
Aug 16 15:55:15 localhost kernel: [11674.312000] audit(1187276115.276:14): REJECTING access to capability 'dac_read_search' (cupsd(11088) profile /usr/sbin/cupsd active /usr/sbin/cupsd)
Aug 16 15:55:18 localhost kernel: [11676.852000] audit(1187276117.776:15): REJECTING w access to /etc/printcap (cupsd(11088) profile /usr/sbin/cupsd active /usr/sbin/cupsd)
Aug 16 15:55:18 localhost kernel: [11677.248000] audit(1187276118.276:16): REJECTING w access to /dev/tty (cupsd(11088) profile /usr/sbin/cupsd active /usr/sbin/cupsd)