From mboxrd@z Thu Jan 1 00:00:00 1970 From: Konrad Rzeszutek Wilk Subject: Re: [PATCH 8/8] xl.pod.1: improve documentation of FLASK commands Date: Thu, 15 Dec 2011 16:56:54 -0400 Message-ID: <20111215205654.GA11829@andromeda.dapyr.net> References: <1323808737-29125-1-git-send-email-dgdegra@tycho.nsa.gov> <1323808737-29125-9-git-send-email-dgdegra@tycho.nsa.gov> <4EEA4624.3080308@tycho.nsa.gov> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Content-Disposition: inline In-Reply-To: <4EEA4624.3080308@tycho.nsa.gov> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xensource.com Errors-To: xen-devel-bounces@lists.xensource.com To: Daniel De Graaf Cc: "xen-devel@lists.xensource.com" , Keir Fraser , Stefano Stabellini List-Id: xen-devel@lists.xenproject.org > There is already an example policy file in tools/flask/policy/policy/modules/xen/xen.te > although it will likely require additional rules to be run in enforcing mode. > The policy is not built as part of the normal build process, but it can be > built by running "make -C tools/flask/policy". If using Fedora 16 (or systems > with a checkpolicy version >24) the Makefile will need to be adjusted to > produce policy version 24 which is the latest version supported by Xen. Is there a howto on how to use it for newbies? Or how to apply policies against a domain? Would it make sense to have that as part of the 'man xl' ?