> Actually, I believe I have set up correctly:
Good catch. I was using old domain's namespace when checking
"acl_group" list. I need to use new domain's namespace.
I think below patch will fix it.

--- a/security/ccsecurity/domain.c      (revision 5107)
+++ b/security/ccsecurity/domain.c      (working copy)
@@ -163,7 +163,7 @@
        }
        if (!retried) {
                retried = true;
-               list = &r->ns->acl_group[domain->group];
+               list = &domain->ns->acl_group[domain->group];
                goto retry;
        }
        r->granted = false;

_______________________________________________
tomoyo-users-en mailing list
[email protected]
http://lists.sourceforge.jp/mailman/listinfo/tomoyo-users-en

Reply via email to