CentOS 7: Cups-pdf Postprocessing Prevented By Selinux :(

Home » CentOS » CentOS 7: Cups-pdf Postprocessing Prevented By Selinux :(
CentOS 1 Comment

Hi,

how can I make it so that printing to a cups PDF printer can successfully run the postprocessing script I specified in /etc/cups/cups-pdf.conf?

It does work with ‘sentenforce permissve’, and after creating and installing some selinux modules from audit.log entries, it still doesn’t work, and there doesn’t seem to be anything else that might prevent the postprocessing script from being run.

One thought on - CentOS 7: Cups-pdf Postprocessing Prevented By Selinux :(

  • I haven’t run into this one myself so I’m not sure this will work (but simple enough to try).

    There is one cups exec related boolean in the base policy:

    # semanage boolean –list | grep -i cup cups_execmem

    You can try to enable it and see if it helps:

    # semanage boolean –modify –on cups_execmem

    The semanage tool is in the policycoreutils-python package if you don’t have it installed.

    /Peter