From mboxrd@z Thu Jan 1 00:00:00 1970 From: Daniel De Graaf Subject: Re: [PATCH] xsm: add device tree labeling support Date: Thu, 12 Mar 2015 13:53:56 -0400 Message-ID: <5501D2B4.9050306@tycho.nsa.gov> References: <1426180387-16128-1-git-send-email-dgdegra@tycho.nsa.gov> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; Format="flowed" Content-Transfer-Encoding: 7bit Return-path: Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YW7JJ-00071M-IC for xen-devel@lists.xenproject.org; Thu, 12 Mar 2015 17:54:17 +0000 In-Reply-To: <1426180387-16128-1-git-send-email-dgdegra@tycho.nsa.gov> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: xen-devel@lists.xenproject.org Cc: julien.grall@linaro.org List-Id: xen-devel@lists.xenproject.org On 03/12/2015 01:13 PM, Daniel De Graaf wrote: > This adds support in the hypervisor and policy build toolchain for > Xen/Flask policy version 25, which adds the ability to label ARM device > tree nodes and expands the IOMEM ocontext entries to 64 bits. > > Signed-off-by: Daniel De Graaf > --- > > Note: Actually using the features added in this patch requires a patch > to the SELinux toolchain (checkpolicy) which has just been sent to that > upstream and xen-devel. This patch will need to be reworked to support policy version 30 instead, which will need additional logic to ignore the new fields added to the security policy in versions 25-29. Please do not apply. -- Daniel De Graaf National Security Agency