[tomoyo-users-en 691] Re: Policy changes are quickly reverted

Back to archive index
Tetsuo Handa pengu****@i-lov*****
Tue Aug 15 08:05:10 JST 2017


stank****@xoxy***** wrote:
> On 08/13/2017 05:41 PM, Tetsuo Handa - 
>  > After rebooting, is /sys/kernel/security/tomoyo/manager still empty?
> 
> Both /sys/kernel/security/tomoyo/manager and /etc/tomoyo/manager.conf 
> are empty after running /usr/lib/tomoyo/init_policy and rebooting. 
> (/etc/tomoyo/manager.conf is empty immediately after running 
> init_policy.  No relevant output is in dmesg.)
> 
OK. So, for some reason /etc/tomoyo/manager.conf is empty. I'm surprised that
init_policy failed to write to /etc/tomoyo/manager.conf . Anyway, you can try
manually creating /etc/tomoyo/manager.conf with content shown below.

[root at localhost ~]# /usr/lib/tomoyo/init_policy
Creating policy directory... OK
Creating configuration directory... OK
Creating exception policy... OK.
Creating domain policy... OK.
Creating manager policy... OK.
Creating default profile... OK.
Creating stat policy... OK.
Creating configuration file for tomoyo-editpolicy ... OK.
Creating configuration file for tomoyo-auditd ... OK.
Creating configuration file for tomoyo-patternize ... OK.
Creating configuration file for tomoyo-notifyd ... OK.
[root at localhost ~]# cat /etc/tomoyo/manager.conf
/usr/sbin/tomoyo-loadpolicy
/usr/sbin/tomoyo-editpolicy
/usr/sbin/tomoyo-setlevel
/usr/sbin/tomoyo-setprofile
/usr/sbin/tomoyo-queryd
[root at localhost ~]# 




More information about the tomoyo-users-en mailing list
Back to archive index