From mboxrd@z Thu Jan 1 00:00:00 1970 From: Daniel De Graaf Subject: Re: [PATCH for-4.5] flask/policy: Updates for example XSM policy Date: Tue, 23 Sep 2014 16:40:49 -0400 Message-ID: <5421DAD1.1000700@tycho.nsa.gov> References: <1411417398-19194-1-git-send-email-dgdegra@tycho.nsa.gov> <20140923090148.GA20691@zion.uk.xensource.com> <20140923093753.GB20691@zion.uk.xensource.com> <1411486209.1781.67.camel@kazak.uk.xensource.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; Format="flowed" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <1411486209.1781.67.camel@kazak.uk.xensource.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: Ian Campbell , Wei Liu Cc: xen-devel@lists.xen.org List-Id: xen-devel@lists.xenproject.org On 09/23/2014 11:30 AM, Ian Campbell wrote: > On Tue, 2014-09-23 at 10:37 +0100, Wei Liu wrote: >> On Tue, Sep 23, 2014 at 10:01:48AM +0100, Wei Liu wrote: >>> On Mon, Sep 22, 2014 at 04:23:18PM -0400, Daniel De Graaf wrote: >>>> The example XSM policy was missing permission for dom0_t to migrate >>>> domains with label domU_t; add these permissions. > > Daniel, would you prefer to iterate until a full batch of fixes or shall > I apply and expect "More updates for example XSM policy" later on? > I would prefer to iterate and apply the full set. -- Daniel De Graaf National Security Agency