Jamie Nguyen
dysco****@gmail*****
Fri Feb 4 19:06:56 JST 2011
TOMOYO
ForkTetsuo Handa wrote:
> The definition is in tags/htdocs/en/1.6.x/old-policy-reference.html .
>
> "canonicalized pathname" means an absolute pathname seen from the root of
> process's namespace (rather than an absolute pathname seen from the root of
> process's root directory). For example,
>
> touch /var/chroot/file
> chroot /var/chroot/ cat /file
>
> "file create /var/chroot/file 0644" is checked by touch and
> "file chroot /var/chroot/" is checked by chroot and
> "file read /var/chroot/file" is checked by cat.
>
> Also, "canonicalized pathname" does not contain /../ nor // nor /./ nor
> symbolic links. ("file symlink /path/to/symlink" is the exception.)
Thanks.
> However, since TOMOYO 1.8 introduced $fsname:/path/to/file notation (e.g.
> proc:/meminfo rather than /proc/meminfo), "canonicalized pathname" may no not
> starts with '/'.
Is there a list somewhere of all of the fsnames supported by TOMOYO Linux?