[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] [PATCH] xsm: add device tree labeling support



On 03/12/2015 01:13 PM, Daniel De Graaf wrote:
This adds support in the hypervisor and policy build toolchain for
Xen/Flask policy version 25, which adds the ability to label ARM device
tree nodes and expands the IOMEM ocontext entries to 64 bits.

Signed-off-by: Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>
---

Note: Actually using the features added in this patch requires a patch
to the SELinux toolchain (checkpolicy) which has just been sent to that
upstream and xen-devel.

This patch will need to be reworked to support policy version 30 instead,
which will need additional logic to ignore the new fields added to the
security policy in versions 25-29.  Please do not apply.

--
Daniel De Graaf
National Security Agency

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.