niekt0 wrote:
> Can someone confirm this as a bug?
Excuse me, but this is not a kernel bug.

> allow_read, allow_write, allow_read/write, allow_ioctl and allow_truncate
> seems to work fine, but
> allow_chmod, allow_create and allow_rename are just dropped.

Regarding TOMOYO 2.3 (and its upstream TOMOYO 1.7),
allow_chmod and allow_create take a pathname and an integer,
allow_rename takes two pathnames (like shown below).

  allow_chmod /home/xxx/.purple/blist.xml.save 0600
  allow_create /home/xxx/.purple/blist.xml.save 0644
  allow_rename /home/xxx/.purple/blist.xml.save /home/xxx/.purple/blist.xml

> System then act, as if they were not specified.
This is because lines with wrong syntax are simply ignored.

Oops, http://tomoyo.sourceforge.jp/2.3/policy-reference.html.en and
http://tomoyo.sourceforge.jp/1.7/policy-reference.html.en want updates.
Please see http://tomoyo.sourceforge.jp/1.8/domain-policy-syntax.html.en
with "file chmod" to "allow_chmod", "file create" to "allow_create",
"file rename" to "allow_rename" replaced.

Regards.

_______________________________________________
tomoyo-users-en mailing list
[email protected]
http://lists.sourceforge.jp/mailman/listinfo/tomoyo-users-en

Reply via email to