Subversion リポジトリの参照
Diff of /trunk/1.8.x/ccs-patch/README.ccs
 Parent Directory
|  Revision Log
|  Patch
| 2281 |
|
|
| 2282 |
Fix 2009/12/15 |
Fix 2009/12/15 |
| 2283 |
|
|
|
@ Don't check DAC permission if disabled mode. |
|
|
|
|
|
I was checking DAC permissions regarding directory entry modification |
|
|
operations (e.g. mkdir()) even if mode=disabled . It is a waste of CPU |
|
|
resource to check DAC permissions when MAC permissions are not checked. |
|
|
Thus, I modified to skip DAC permission checks if mode=disabled . |
|
|
|
|
| 2284 |
@ Allow deleting "quota_exceeded" and "transition_failed" entries. |
@ Allow deleting "quota_exceeded" and "transition_failed" entries. |
| 2285 |
|
|
| 2286 |
To notify users of "this domain has too many entries to hold" and "some |
To notify users of "this domain has too many entries to hold" and "some |
| 2298 |
between TOMOYO 1.7.0 and 1.7.1 , I made a mistake which made TOMOYO to |
between TOMOYO 1.7.0 and 1.7.1 , I made a mistake which made TOMOYO to |
| 2299 |
check allow_read permission of the programs specified by execute_handler |
check allow_read permission of the programs specified by execute_handler |
| 2300 |
and denied_execute_handler keywords. |
and denied_execute_handler keywords. |
| 2301 |
|
|
| 2302 |
|
@ Don't check DAC permission if disabled mode. |
| 2303 |
|
|
| 2304 |
|
I was checking DAC permissions regarding directory entry modification |
| 2305 |
|
operations (e.g. mkdir()) even if mode=disabled . It is a waste of CPU |
| 2306 |
|
resource to check DAC permissions when MAC permissions are not checked. |
| 2307 |
|
Thus, I modified to skip DAC permission checks if mode=disabled . |
|
|
Legend:
| Removed from v.3262 |
|
| changed lines |
| |
Added in v.3263 |
|
|
| 
TOMOYO
Parent Directory
Revision Log
Patch