Hello.

karl156 wrote:
> How can I stop Tomoyo from auto adding such entries to my policy file?
> 
> <kernel> /usr/sbin/cron /bin/sh
> use_profile 0
> use_group 0

> What am I doing wrong? How can I stop it?

Sorry but you can't.

use_profile and use_group lines are automatically added and are overwritable
but are not deletable. These lines are essential attributes of the domain.

> I am using Tomoyo 2.5 on Linux 3.2.

use_profile line takes a profile number defined in 
/sys/kernel/security/tomoyo/profile .

use_group line takes an acl_group number defined in 
/sys/kernel/security/tomoyo/exception_policy .

Regards.

_______________________________________________
tomoyo-users-en mailing list
[email protected]
http://lists.sourceforge.jp/mailman/listinfo/tomoyo-users-en

Reply via email to