From mboxrd@z Thu Jan 1 00:00:00 1970 From: Doug Goldstein Subject: Re: [PATCH] tools: adjust rules for FLASK policy generation Date: Sat, 16 Jan 2016 14:53:57 -0600 Message-ID: <569AADE5.7000602@cardoe.com> References: <1452807835-7935-1-git-send-email-cardoe@cardoe.com> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3849161419692775052==" Return-path: In-Reply-To: <1452807835-7935-1-git-send-email-cardoe@cardoe.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: xen-devel@lists.xen.org Cc: Wei Liu , Ian Jackson , Ian Campbell , Stefano Stabellini List-Id: xen-devel@lists.xenproject.org This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============3849161419692775052== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="uox68adavjbAxT1wIcEWpSQNedR9A2BeA" This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --uox68adavjbAxT1wIcEWpSQNedR9A2BeA Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 1/14/16 3:43 PM, Doug Goldstein wrote: > Change the default on the --{enable,disable}-xsmpolicy configure switch= > to disabled by default but always build the necessary utilities for > FLASK. The result is that the tools will always be built (and can be > omitted by the packager) but the policy won't always be generated and > installed if the tools are built. Previously the policy was always buil= t > if the tools were built. >=20 > CC: Ian Jackson > CC: Stefano Stabellini > CC: Ian Campbell > CC: Wei Liu > Signed-off-by: Doug Goldstein > --- > So this patch is a replacement for: > http://lists.xenproject.org/archives/html/xen-devel/2015-12/msg02538.ht= ml >=20 > This was to address concerns that the FLASK policy was now always built= and > installed and would confuse users. Patches to handle this potential cha= nge > have been submitted in osstest have already been submitted to the ML. I= > posted more rationale behind this on the other patch at: > http://lists.xenproject.org/archives/html/xen-devel/2016-01/msg01591.ht= ml > --- > tools/Makefile | 2 +- > tools/configure.ac | 2 +- > 2 files changed, 2 insertions(+), 2 deletions(-) >=20 > diff --git a/tools/Makefile b/tools/Makefile > index 9f74ac7..3f9289b 100644 > --- a/tools/Makefile > +++ b/tools/Makefile > @@ -5,7 +5,7 @@ SUBDIRS-y :=3D > SUBDIRS-y +=3D include > SUBDIRS-y +=3D libs > SUBDIRS-y +=3D libxc > -SUBDIRS-$(FLASK_ENABLE) +=3D flask > +SUBDIRS-y +=3D flask > SUBDIRS-y +=3D xenstore > SUBDIRS-y +=3D misc > SUBDIRS-y +=3D examples > diff --git a/tools/configure.ac b/tools/configure.ac > index 6c70040..e0fb862 100644 > --- a/tools/configure.ac > +++ b/tools/configure.ac > @@ -80,7 +80,7 @@ AX_ARG_DEFAULT_DISABLE([rpath], [Build tools with -Wl= ,-rpath,LIBDIR]) > AX_ARG_DEFAULT_DISABLE([githttp], [Download GIT repositories via HTTP]= ) > AX_ARG_DEFAULT_ENABLE([monitors], [Disable xenstat and xentop monitori= ng tools]) > AX_ARG_DEFAULT_ENABLE([ocamltools], [Disable Ocaml tools]) > -AX_ARG_DEFAULT_ENABLE([xsmpolicy], [Disable XSM policy compilation]) > +AX_ARG_DEFAULT_DISABLE([xsmpolicy], [Disable XSM policy compilation]) > AX_ARG_DEFAULT_DISABLE([ovmf], [Enable OVMF]) > AX_ARG_DEFAULT_ENABLE([seabios], [Disable SeaBIOS]) > =20 >=20 Given the support of the maintainers and committers for the proposal [1], this patch should NOT be applied. [1] http://lists.xenproject.org/archives/html/xen-devel/2016-01/msg01796.html= --=20 Doug Goldstein --uox68adavjbAxT1wIcEWpSQNedR9A2BeA Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0 iQJ8BAEBCgBmBQJWmq3lXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRBNTM5MEQ2RTNFMTkyNzlCNzVDMzIwOTVB MkJDMDNEQzg3RUQxQkQ0AAoJEKK8A9yH7RvUELsP/347IyAgCEgZqF8HlG0zdRqf hbYvHOFpUcdDeBaB/koAuEEwPPOCPRvCdrwlXgxzqQrZNdHxfNl98T1Ym8r0R44d GBzi1ghNInSJAlRnHHI//69Q64DqXORvwYCnzr5Odp30LdNt1UToVPdCV3CE6I+t Urd0vaOeHPK1FxrjSZjGHD15Ka29JmkyIrpM7EPT5IUtfLhZ8bvzGCWI76uq0ud8 4Neq/VSS7iSRq02+9bBAZJdC8VBnztvLiz2vLJlhFj3oIuhJE9W2rI4RyZbIzl9t AvB9TAQA5E11AvvNu7Go3djnKXQzzNTq7EwUTmFmNfQyAaYw11TIQqD6IiYpm+cw Yj/XXW1+ImD3O93utNfgdw0mVSlZymxK7ccwv0smxxzM+/DKqJoUIrP6fDyP5H5G d1zh25Pl70PRfHhub6nBwSA/CpiNbmBoRg8K34E6/GxXHSgb4Iuw75okHsexgcW7 sBdJlHG8iTAP/20s4ALX2iKIlBQsp7SYdAhuXlcimZKPUncEryB0ZtqS8VYQLa5N xs3TCfZmSEHKljpqjmJ1Ekey5x9qnr1/nOYQ0RyYTO/2iQe94BG5mX/PgW/3q2uE eccUw6kywaU5UJVJrSOD7u/lvwykbQwanisHDOqnEpkSpLUTdA5UHSRTIn295rxR TF/nEzabcBg5GTp2wUDi =lKeJ -----END PGP SIGNATURE----- --uox68adavjbAxT1wIcEWpSQNedR9A2BeA-- --===============3849161419692775052== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org http://lists.xen.org/xen-devel --===============3849161419692775052==--