TOMOYO
Fork> Actually, I believe I have set up correctly:
Good catch. I was using old domain's namespace when checking
"acl_group" list. I need to use new domain's namespace.
I think below patch will fix it.
--- a/security/ccsecurity/domain.c (revision 5107)
+++ b/security/ccsecurity/domain.c (working copy)
@@ -163,7 +163,7 @@
}
if (!retried) {
retried = true;
- list = &r->ns->acl_group[domain->group];
+ list = &domain->ns->acl_group[domain->group];
goto retry;
}
r->granted = false;