TOMOYO: Fix interactive judgment functionality.
authorTetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Wed, 19 Oct 2011 21:48:57 +0000 (06:48 +0900)
committerJames Morris <jmorris@namei.org>
Fri, 28 Oct 2011 21:34:41 +0000 (08:34 +1100)
Commit 17fcfbd9 "TOMOYO: Add interactive enforcing mode." introduced ability
to query access decision using userspace programs. It was using global PID for
reaching policy configuration of the process. However, use of PID returns stale
policy configuration when the process's subjective credentials and objective
credentials differ. Fix this problem by allowing reaching policy configuration
via query id.

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>

No differences found