Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Tetsuo Handa 484ca79c65 TOMOYO: Use pathname specified by policy rather than execve() ...

Commit c9e69318 "TOMOYO: Allow wildcard for execute permission." changed execute
permission and domainname to accept wildcards. But tomoyo_find_next_domain()
was using pathname passed to execve() rather than pathname specified by the
execute permission. As a result, processes were not able to transit to domains
which contain wildcards in their domainnames.

This patch passes pathname specified by the execute permission back to
tomoyo_find_next_domain() so that processes can transit to domains which
contain wildcards in their domainnames.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>

2010-08-02 15:38:38 +10:00

130 lines

3.6 KiB

Raw Permalink Blame History