[tomoyo-users-en 168] Re: tomoyo-editpolicy

Back to archive index
Ritesh Raj Sarraf rrs****@debia*****
Sun May 30 14:29:46 JST 2010


Hello Tetsuo,


On Sunday 30 May 2010 06:39:14 Tetsuo Handa wrote:
> But profile 0 is configured for "disabled" mode.
> 
> > 23:53:23 rrs at champaran:/etc/tomoyo $ cat profile.conf
> > 0-COMMENT=-----Disabled Mode-----
> > 0-MAC_FOR_FILE=disabled
> > 0-TOMOYO_VERBOSE=disabled
> > 1-COMMENT=-----Learning Mode-----
> > 1-MAC_FOR_FILE=learning
> > 1-TOMOYO_VERBOSE=disabled
> 
> Profile 1 is configured for "learning" mode.
> Please rewrite /etc/tomoyo/domain_policy.conf like
> 
>   # cat > /etc/tomoyo/domain_policy.conf << EOF
>   <kernel>
>   use_profile 1
>   EOF
> 
> and reboot. Then, you will see "<<< Domain Transition Editor >>>" window
> like
>

Thank you for the detailed explanation. I have made the changes and am 
currently playing with it. There's a dmesg warning which popped in my normal 
desktop login operation.

[  217.223476] TOMOYO-WARNING: Domain '<kernel> /etc/init.d/kdm /sbin/start-
stop-daemon /usr/bin/kdm /etc/kde4/kdm/Xsession /bin/bash /usr/bin/ssh-agent 
/usr/bin/gpg-agent /usr/bin/dbus-launch /usr/bin/startkde 
/usr/lib/kde4/libexec/start_kdeinit_wrapper 
/usr/lib/kde4/libexec/start_kdeinit /usr/bin/kdeinit4 /usr/bin/plasma-desktop' 
has so many ACLs to hold. Stopped learning mode.
[  317.403206] TOMOYO-WARNING: Domain '<kernel> /etc/init.d/kdm /sbin/start-
stop-daemon /usr/bin/kdm /etc/kde4/kdm/Xsession /bin/bash /usr/bin/ssh-agent 
/usr/bin/gpg-agent /usr/bin/dbus-launch /usr/bin/startkde 
/usr/lib/kde4/libexec/start_kdeinit_wrapper 
/usr/lib/kde4/libexec/start_kdeinit /usr/bin/kdeinit4 /usr/bin/kontact' has so 
many ACLs to hold. Stopped learning mode.

Regards,
Ritesh
-- 
Ritesh Raj Sarraf | http://people.debian.org/~rrs
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.osdn.me/mailman/archives/tomoyo-users-en/attachments/20100530/31811d5f/attachment.sig>


More information about the tomoyo-users-en mailing list
Back to archive index