From dc89f9a86bda55a505b0bd487e4bd8058792bdb1 Mon Sep 17 00:00:00 2001 From: Peter Rajnoha Date: Fri, 8 Dec 2023 12:28:54 +0100 Subject: [PATCH] resource: module-registry: create module resource with SID_RESOURCE_RESTRICT_WALK_UP on module_registry_load_module We already restrict walking up from the module resource when using module_registry_load_modules. Do the same if we're loading a single module with module_registry_load_module. --- src/resource/module-registry.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/resource/module-registry.c b/src/resource/module-registry.c index ce09c729..fde1d9fb 100644 --- a/src/resource/module-registry.c +++ b/src/resource/module-registry.c @@ -125,7 +125,7 @@ sid_resource_t *module_registry_load_module(sid_resource_t *mod_registry_res, co if (!(mod_res = sid_resource_create(mod_registry_res, &sid_resource_type_module, - SID_RESOURCE_DISALLOW_ISOLATION, + SID_RESOURCE_RESTRICT_WALK_UP | SID_RESOURCE_DISALLOW_ISOLATION, module_name, NULL, SID_RESOURCE_PRIO_NORMAL,