Browse Subversion Repository
Diff of /trunk/1.7.x/ccs-patch/README.ccs
Parent Directory
| Revision Log
| Patch
2281 |
|
|
2282 |
Fix 2009/12/15 |
Fix 2009/12/15 |
2283 |
|
|
|
@ Don't check DAC permission if disabled mode. |
|
|
|
|
|
I was checking DAC permissions regarding directory entry modification |
|
|
operations (e.g. mkdir()) even if mode=disabled . It is a waste of CPU |
|
|
resource to check DAC permissions when MAC permissions are not checked. |
|
|
Thus, I modified to skip DAC permission checks if mode=disabled . |
|
|
|
|
2284 |
@ Allow deleting "quota_exceeded" and "transition_failed" entries. |
@ Allow deleting "quota_exceeded" and "transition_failed" entries. |
2285 |
|
|
2286 |
To notify users of "this domain has too many entries to hold" and "some |
To notify users of "this domain has too many entries to hold" and "some |
2298 |
between TOMOYO 1.7.0 and 1.7.1 , I made a mistake which made TOMOYO to |
between TOMOYO 1.7.0 and 1.7.1 , I made a mistake which made TOMOYO to |
2299 |
check allow_read permission of the programs specified by execute_handler |
check allow_read permission of the programs specified by execute_handler |
2300 |
and denied_execute_handler keywords. |
and denied_execute_handler keywords. |
2301 |
|
|
2302 |
|
@ Don't check DAC permission if disabled mode. |
2303 |
|
|
2304 |
|
I was checking DAC permissions regarding directory entry modification |
2305 |
|
operations (e.g. mkdir()) even if mode=disabled . It is a waste of CPU |
2306 |
|
resource to check DAC permissions when MAC permissions are not checked. |
2307 |
|
Thus, I modified to skip DAC permission checks if mode=disabled . |
|
Legend:
Removed from v.3262 |
|
changed lines |
|
Added in v.3263 |
|
|
|