Re: successful cupsys admin: advantages of running pam_selinux

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Sun, Jun 06, 2004 at 07:46:26PM +1000, Russell Coker wrote:
> On Sun, 6 Jun 2004 10:08, Luke Kenneth Casson Leighton <lkcl@lkcl.net> wrote:
> > it is with some amazement that, by adding pam_selinux to /etc/pam.d/cups
> > and by adding an ordinary user to the lpadmin group that i was able
> > to have that ordinary user set up a local printer and actually print
> > to it (openoffice).
> 
> How does cups use pam_selinux?
 
  umm....

> Cups doesn't spawn a shell, and even if it tried the policy does not permit 
> domain transitions to user domains.
> 
> Cups doesn't have any terminal devices to relabel.

 i'll do an experiment: i'll remove the entry pam_selinux from
 /etc/pam.d/cups and see if i can add a printer...
 
 ... and it works.  hey, that's even better.

 thanks!

 l.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.