Ritesh Raj Sarraf wrote:
> 
> Is this supposed to work with the in-kernel implementation of TOMOYO?
> 
Unfortunately no. GPET supports only TOMOYO 1.8's syntax.

It will be easy to modify GPET to use /sys/kernel/security/tomoyo/ rather than
/proc/ccs/ . However, TOMOYO 2.2 (which is supported in Debian Squeeze) uses
TOMOYO 1.6's syntax. Due to syntax difference (e.g. "allow_create" directive in
TOMOYO 1.6 does not have "mode" argument whereas "file create" directive in
TOMOYO 1.8 has "mode" argument), GPET cannot support TOMOYO 2.2/2.3.

GPET will be able to support TOMOYO 2.4 (which uses TOMOYO 1.8's syntax).
Please wait for TOMOYO 2.4.

People might think that if someone develops a GUI editor, he/she would create
it for TOMOYO 2.x. But when Yoshihiro started GPET project, there was huge
functionality gap between TOMOYO 1.x and TOMOYO 2.x. Thus, he created it for
TOMOYO 1.x.

The gap became smaller in TOMOYO 2.3, and will become more smaller in TOMOYO 
2.4.
http://tomoyo.sourceforge.jp/comparison.html.en

Thanks.

_______________________________________________
tomoyo-users-en mailing list
[email protected]
http://lists.sourceforge.jp/mailman/listinfo/tomoyo-users-en

Reply via email to