diff options
| author | Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> | 2011-10-20 06:48:57 +0900 |
|---|---|---|
| committer | James Morris <jmorris@namei.org> | 2011-10-29 08:34:41 +1100 |
| commit | 59df3166ef293288d164ab3362a717743e62d20c (patch) | |
| tree | ee10bb9ae940bf59beaf05dd5925d03044eb6559 /security/selinux | |
| parent | c45ed235abf1b0b6666417e3c394f18717976acd (diff) | |
TOMOYO: Fix interactive judgment functionality.
Commit 17fcfbd9 "TOMOYO: Add interactive enforcing mode." introduced ability
to query access decision using userspace programs. It was using global PID for
reaching policy configuration of the process. However, use of PID returns stale
policy configuration when the process's subjective credentials and objective
credentials differ. Fix this problem by allowing reaching policy configuration
via query id.
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>
Diffstat (limited to 'security/selinux')
0 files changed, 0 insertions, 0 deletions