開發和下載開源軟體

TOMOYO

Browse Subversion Repository

/[tomoyo]/trunk/1.5.x/ccs-patch/README.ccs

Diff of /trunk/1.5.x/ccs-patch/README.ccs

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 512 by kumaneko, Thu Sep 27 08:52:16 2007 UTC revision 581 by kumaneko, Tue Oct 16 08:00:21 2007 UTC
# Line 1040  Fix 2007/09/27 Line 1040  Fix 2007/09/27
1040    
1041        Now, quota checking is done before getting domain_acl_lock lock.        Now, quota checking is done before getting domain_acl_lock lock.
1042        This may exceed quota by one or two entries, but that won't matter.        This may exceed quota by one or two entries, but that won't matter.
1043    
1044    Fix 2007/10/16
1045    
1046        @ Add environment variable check.
1047    
1048          There are environment variables that may cause dangerous behavior
1049          like LD_\* .
1050          So I introduced 'allow_env' directive that allows specified
1051          environment variable inherited to next domain.
1052          Unlike other permissions, this check is done at execve() time
1053          using next domain's ACL information.
1054    
1055          To manage commonly inherited environments like PATH ,
1056          you can use 'allow_env' directive in exception policy
1057          to globally grant specified environment variable.
Legend:
Removed from v.512  
changed lines
  Added in v.581
Back to OSDN">Back to OSDN
 ViewVC Help
Powered by ViewVC 1.1.26  
OSDN:關於
軟件搜索
軟件開發
社群
帮助