CentOS - Apr 2020 - Centos 7: cups-pdf Postprocessing prevented by selinux :(

Hi,

how can I make it so that printing to a cups PDF printer can successfully run 
the postprocessing script I specified in /etc/cups/cups-pdf.conf?

It does work with 'sentenforce permissve', and after creating and
installing
some selinux modules from audit.log entries, it still doesn't work, and
there
doesn't seem to be anything else that might prevent the postprocessing
script
from being run.

On Wed, 15 Apr 2020 04:55:13 +0200
hw <hw at gc-24.de> wrote:
> Hi,
> 
> how can I make it so that printing to a cups PDF printer can
> successfully run the postprocessing script I specified
> in /etc/cups/cups-pdf.conf?
I haven't run into this one myself so I'm not sure this will work (but
simple enough to try).

There is one cups exec related boolean in the base policy:

 # semanage boolean --list | grep -i cup
 cups_execmem           
 
You can try to enable it and see if it helps:

 # semanage boolean --modify --on cups_execmem

The semanage tool is in the policycoreutils-python package if you don't
have it installed.

/Peter