[tomoyo-dev-en 295] allow_execute /proc/PID/exe

Back to archive index

Horvath Andras han****@log69*****
Wed Jul 13 19:07:46 JST 2011


Hi,

I'd like to ask some help.

Chromium-browser is creating rules like the following in learning mode:

allow_execute /proc/$PID/exe

And of course the $PID changes everytime chromium is restarted. If i
replace that line with this:

allow_execute /proc/\$/exe

..then it will disappear from the rules after reloading it.

Is that allowed with "allow_execute" rule? Shouldn't it work as i expect
that with that rule chromium will be able to execute any running
processes' executable?

Thanks in advance!


Andras Horvath




More information about the tomoyo-dev-en mailing list
Back to archive index