|
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [Xen-changelog] [xen master] flask/policy: remove unused example
commit b49839ef4e6ba183503912d169df7635e1c6df54
Author: Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>
AuthorDate: Mon Jun 20 10:04:15 2016 -0400
Commit: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
CommitDate: Tue Jun 21 15:29:18 2016 +0100
flask/policy: remove unused example
The access vectors defined here have never been used by xenstore.
Signed-off-by: Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>
Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
Reviewed-by: Doug Goldstein <cardoe@xxxxxxxxxx>
---
tools/flask/policy/policy/access_vectors | 23 ++---------------------
tools/flask/policy/policy/security_classes | 1 -
2 files changed, 2 insertions(+), 22 deletions(-)
diff --git a/tools/flask/policy/policy/access_vectors
b/tools/flask/policy/policy/access_vectors
index 4fd61f1..d9c69c0 100644
--- a/tools/flask/policy/policy/access_vectors
+++ b/tools/flask/policy/policy/access_vectors
@@ -1,24 +1,5 @@
# Locally defined access vectors
#
-# Define access vectors for the security classes defined in security_classes
+# Define access vectors for the security classes defined in security_classes.
+# Access vectors defined in this file should not be used by the hypervisor.
#
-
-# Note: this is an example; the xenstore daemon provided with Xen does
-# not yet include XSM support, and the exact permissions may be defined
-# differently if such support is added.
-class xenstore {
- # read from keys owned by the target domain (if permissions allow)
- read
- # write to keys owned by the target domain (if permissions allow)
- write
- # change permissions of a key owned by the target domain
- chmod
- # change the owner of a key which was owned by the target domain
- chown_from
- # change the owner of a key to the target domain
- chown_to
- # access a key owned by the target domain without permission
- override
- # introduce a domain
- introduce
-}
diff --git a/tools/flask/policy/policy/security_classes
b/tools/flask/policy/policy/security_classes
index 56595e8..0f0f9f3 100644
--- a/tools/flask/policy/policy/security_classes
+++ b/tools/flask/policy/policy/security_classes
@@ -5,4 +5,3 @@
# security policy.
#
# Access vectors for these classes must be defined in the access_vectors file.
-class xenstore
--
generated by git-patchbot for /home/xen/git/xen.git#master
_______________________________________________
Xen-changelog mailing list
Xen-changelog@xxxxxxxxxxxxx
http://lists.xensource.com/xen-changelog
|
![]() |
Lists.xenproject.org is hosted with RackSpace, monitoring our |