All of lore.kernel.org
 help / color / mirror / Atom feed
From: Ian Campbell <ian.campbell@citrix.com>
To: xen-devel@lists.xen.org
Cc: ian.jackson@eu.citrix.com,
	Daniel De Graaf <dgdegra@tycho.nsa.gov>,
	wei.liu2@citrix.com
Subject: Re: [PATCH v3 0/6] Assign a default SSID to guests
Date: Thu, 21 May 2015 10:54:44 +0100	[thread overview]
Message-ID: <1432202084.10746.23.camel@citrix.com> (raw)
In-Reply-To: <1432132201.12989.268.camel@citrix.com>

On Wed, 2015-05-20 at 15:30 +0100, Ian Campbell wrote:
> Compared with v3 this uses Daniel's more comprehensive policy patch and
> adds a default ssidref for stubdoms too.
> 
> Tested with and without XSM enabled for normal guests and HVM guests
> with qemu in dom0. Stubdoms appeared to be broken in the base case, so I
> haven't tested that really.

I rebased onto new staging (no changes needed) and now stubdoms seem to
work again and look to have been correctly labelled using the new
defaults:

# xl list -Z
Name                                        ID   Mem VCPUs	State	Time(s)   Security Label
Domain-0                                     0   511     8     r-----      14.4 system_u:system_r:dom0_t
debianhvm.guest.osstest                      1   768     2     -b----       5.7 system_u:system_r:domU_t
debianhvm.guest.osstest-dm                   2    32     1     -b----       4.0 system_u:system_r:dm_dom_t

Ian.

  parent reply	other threads:[~2015-05-21  9:54 UTC|newest]

Thread overview: 16+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-05-20 14:30 [PATCH v3 0/6] Assign a default SSID to guests Ian Campbell
2015-05-20 14:38 ` [PATCH v3 1/6] tools: Add AWK to set of tools checked for by configure Ian Campbell
2015-05-20 14:38 ` [PATCH v3 2/6] xen: flask: Pass output directory as a parameter to mkflask.sh Ian Campbell
2015-05-20 14:44   ` Daniel De Graaf
2015-05-20 14:38 ` [PATCH v3 3/6] xen: flask: Restrict generated header to xen + tools Ian Campbell
2015-05-20 14:45   ` Daniel De Graaf
2015-05-20 14:38 ` [PATCH v3 4/6] tools: Expose XSM Flask initial SIDs list to tools Ian Campbell
2015-05-20 14:46   ` Daniel De Graaf
2015-05-20 14:38 ` [PATCH v3 5/6] flask/policy: add initial SIDs for domU/domDM Ian Campbell
2015-05-20 14:39 ` [PATCH v3 6/6] libxl: assign a default ssidref (XSM label) to guests Ian Campbell
2015-05-20 14:41   ` Wei Liu
2015-05-20 14:51   ` Daniel De Graaf
2015-05-21 14:54     ` Ian Campbell
2015-05-20 14:40 ` [PATCH v3 0/6] Assign a default SSID " Wei Liu
2015-05-21  9:54 ` Ian Campbell [this message]
2015-05-21  9:57   ` Wei Liu

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1432202084.10746.23.camel@citrix.com \
    --to=ian.campbell@citrix.com \
    --cc=dgdegra@tycho.nsa.gov \
    --cc=ian.jackson@eu.citrix.com \
    --cc=wei.liu2@citrix.com \
    --cc=xen-devel@lists.xen.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.