diff options
| author | Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp> | 2010-06-03 20:37:26 +0900 |
|---|---|---|
| committer | James Morris <jmorris@namei.org> | 2010-08-02 15:33:42 +1000 |
| commit | 3f629636320dfa65804779a3fc333f3147f3b064 (patch) | |
| tree | e44dc9f63ae8c6cd37d5471d014cd9b0449027e7 /security/tomoyo/number_group.c | |
| parent | c8c57e842720d8cc92ac8607f2d1c16d92314573 (diff) | |
TOMOYO: Allow wildcard for execute permission.
Some applications create and execute programs dynamically. We need to accept
wildcard for execute permission because such programs contain random suffix
in their filenames. This patch loosens up regulation of string parameters.
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: James Morris <jmorris@namei.org>
Diffstat (limited to 'security/tomoyo/number_group.c')
| -rw-r--r-- | security/tomoyo/number_group.c | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/security/tomoyo/number_group.c b/security/tomoyo/number_group.c index c49792e09e8..8d6ef8f006f 100644 --- a/security/tomoyo/number_group.c +++ b/security/tomoyo/number_group.c @@ -24,8 +24,7 @@ struct tomoyo_number_group *tomoyo_get_number_group(const char *group_name) struct tomoyo_number_group *group = NULL; const struct tomoyo_path_info *saved_group_name; int error = -ENOMEM; - if (!tomoyo_is_correct_path(group_name, 0, 0, 0) || - !group_name[0]) + if (!tomoyo_is_correct_word(group_name)) return NULL; saved_group_name = tomoyo_get_name(group_name); if (!saved_group_name) |