Tetsuo Handa
from-****@I-lov*****
Mon Dec 20 21:24:35 JST 2010
TOMOYO
ForkTetsuo Handa wrote:
> OK. Both implemented in revision 4212 (though tuning and testing are needed).
Below is the changelog as of revision 4215.
Policy file's location has moved from /etc/ccs/ directory to
/etc/ccs/policy/YY-MM-DD.hh:mm:ss/ directory. A symlink named "current" which
points to YY-MM-DD.hh:mm:ss/ directory is created under /etc/ccs/policy/
directory so that users can switch policy files by manipulating only one
symlink. Also, a symlink named "previous" which points to previous
YY-MM-DD.hh:mm:ss/ directory is created under /etc/ccs/policy/ directory
so that users can easily find previous back up. For compatibility and user's
convenience, symlinks which point to policy/current/ are created in
/etc/ccs/ directory.
Configuration file for userland programs has moved from
/usr/lib/ccs/ccstools.conf to /etc/ccs/tools/ directory.
/usr/sbin/ccs-patternize
Changed syntax and keywords.
Added conditional rewriting support.
Added leading pathname matching and trailing pathname matching support.
Use /etc/ccs/tools/patternize.conf rather than command line arguments.
First command line argument was not used by error.
The "file getattr" permission was not handled by error.
/usr/sbin/ccs-auditd
Use /proc/ccs/audit rather than /proc/ccs/grant_log and
/proc/ccs/reject_log (this change requires updated ccs-patch ).
Added conditional auditing support.
Use /etc/ccs/tools/auditd.conf rather than command line arguments.
/usr/sbin/ccs-editpolicy
Use /etc/ccs/tools/editpolicy.conf rather than /usr/lib/ccs/ccstools.conf .
/usr/sbin/ccs-diffpolicy
The first argument and the second argument were reversed by error.
/usr/sbin/ccs-savepolicy
Always save domain_policy.conf exception_policy.conf manager.conf and
profile.conf under /etc/ccs/policy/YY-MM-DD.hh:mm:ss/ directory.
Require one of '-e' '-d' '-p' '-m' '-u' for printing to stdout.
/usr/lib/ccs/init_policy
Create initial policy under /etc/ccs/policy/YY-MM-DD.hh:mm:ss/ directory.
Create initial userland configuration under /etc/ccs/tools/ directory.
And I'm going to remove the 'a' option from ccs-loadpolicy command tomorrow
because the 'a' option was removed from ccs-savepolicy command.
I didn't mean to make incompatible changes within 1.8.x series, but please
understand that now is a good chance to make 1.8 easier to understand/use.
Thanks.