Re: [PATCH OSSTEST] Debian: Support runvar to set flask mode

[Ian Campbell <ian.campbell@citrix.com>]

On Mon, 2015-12-14 at 18:58 +0000, Ian Jackson wrote:
> Ian Campbell writes ("[PATCH OSSTEST] Debian: Support runvar to set flask
> mode"):
> > Currently it is hardcoding to enforcing but it might be useful to
> > run with e.g.  permissive or even disabled (aka dummy mode)
> ...
> > --- a/overlay/etc/grub.d/20_linux_xen
> > +++ b/overlay/etc/grub.d/20_linux_xen
> > @@ -93,7 +93,9 @@ linux_entry ()
> >        if test ! -e "${xen_dirname}/${xenpolicy}" ; then
> >  	  return
> >        fi
> > -      xen_args=`echo $xen_args flask=enforcing`
> > +      if test -n "${GRUB_XEN_FLASK_MODE}" ; then
> > +          xen_args=`echo $xen_args flask=${GRUB_XEN_FLASK_MODE}`
> > +      fi
> 
> I thought we were hoping to eventually do away with our copy of this
> file.  Has this change gone upstream ?

Sadly there has not been a peep from the maintainers on http://savannah.gnu
.org/bugs/?43420

Perhaps we should also send the patch to the upstream ML?

Ian.

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
http://lists.xen.org/xen-devel