> Hello.

Hello.

> Lee Worden wrote:
>>> The maximum length is 4086 characters. If environment variable string is 
>>> longer
>>> than 4086 characters, only beginning 4086 characters are checked.
>>
>> Sorry, is that the maximum length for each name-value pair, or for the
>> entire list of pairs?  The individual name-values pairs in my example are
>> not that long.
>
> For each name (e.g. "SGE_JOB_SPOOL_DIR", "PATH", "HOME").
>
>>>> allow_env spool/n03/active_jobs/175.1
>>>
>>> "allow_env" line prints environment variable's name rather than its value.
>>
>> I understand.  The actual name-value pair is
>> "SGE_JOB_SPOOL_DIR=/usr/local/sge/default/spool/n03/active_jobs/175.1".
>>
>> It is as if the list of name-value pairs is being cut in the middle, and
>> the later part of this value is treated as if it were a name.
>>
>> When the values are different, the cut happens in a different place.
>
> That's because TOMOYO 1.7.0 by error used same buffer for both name and value.
>
>> I'll try to collect more information and see if I can isolate the problem.
>
> I think you can isolate the problem by disabling "allow_env" checking.
> Steps to disable "allow_env" checking are
>
> (1) append below lines to /etc/ccs/profile.conf
>
> 0-CONFIG::misc::env={ mode=disabled }
> 1-CONFIG::misc::env={ mode=disabled }
> 2-CONFIG::misc::env={ mode=disabled }
> 3-CONFIG::misc::env={ mode=disabled }
>
>    (if you have more profiles, please repeat the lines as well.)
>
> (2) reload /etc/ccs/profile.conf by
>
>    /usr/sbin/ccs-loadpolicy p
>
> It seems to me that you have a reason you cannot use TOMOYO 1.7.2 .
> Is it possible to send me the output of /proc/version and /proc/ccs/version ?
> I'd like to reproduce the problem using the same kernel you are using.

No, I've asked the operations team to patch the tomoyo installation. 
Currently it's Mandriva Linux version 2.6.29.6-server-3mnb, and Tomoyo 
version 1.6.7.

I'll disable allow_env in the meantime.  Thanks again.

>> Thank you for your help.
>
> You are welcome.
>

_______________________________________________
tomoyo-users-en mailing list
[email protected]
http://lists.sourceforge.jp/mailman/listinfo/tomoyo-users-en

Reply via email to