Re: [Xen-devel] [PATCH 8/8] xl.pod.1: improve documentation of FLASK commands

[Ian Campbell <Ian.Campbell@xxxxxxxxxx>]

On Wed, 2012-01-04 at 16:49 +0000, Stefano Stabellini wrote:
> On Wed, 4 Jan 2012, Daniel De Graaf wrote:
> > The example policy doesn't really belong in docs because it needs to be
> > compiled to be usable, and this depends on a number of other files (all
> > files under tools/flask/policy/policy, to be exact). Compiling and
> > installing FLASK policy during the normal build process (conditional on
> > FLASK_ENABLE to avoid adding SELinux build tools to build dependencies?)
> > would be the best solution. The policy must be installed to /boot, not
> > /etc/xen, because the initial policy load happens prior to starting dom0.
> 
> Like Ian said, I meant having the policy somewhere online where can be
> linked. However we only publish on xenbits what we have under docs ATM.
> It is unfortunate that the policy needs FLASK_ENABLE to be compiled
> because I am pretty sure that the automated build system that produces
> the docs that end up online does not support that option right now.

Publishing the docs in this manner wouldn't require FLASK_ENABLE since
it doesn't need any tools, just "cp". Unless I've totally got the wrong
end of the stick and the policy needs processing before you can even
usefully read it?

Ian.



_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel