Re: [Xen-devel] [PATCH] flask/policy: fix static device labeling examples

2015-03-18 Thread Ian Campbell
On Wed, 2015-03-11 at 10:59 -0400, Daniel De Graaf wrote: > The definitions of static device labels must be placed at the end of the > policy.conf before passing it to checkpolicy; the existing examples > (which are commented out) are in the wrong location. Create a new file > for device contexts

Re: [Xen-devel] [PATCH] flask/policy: fix static device labeling examples

2015-03-17 Thread Jan Beulich
>>> On 17.03.15 at 14:03, wrote: > (CC Ian and Jan) This is mostly about tools stuff: >> docs/misc/xsm-flask.txt | 31 +++ >> tools/flask/policy/Makefile | 3 ++- >> tools/flask/policy/policy/device_contexts| 32

Re: [Xen-devel] [PATCH] flask/policy: fix static device labeling examples

2015-03-17 Thread Julien Grall
(CC Ian and Jan) Hi, Is there any blocker to push this patch? It's useful for using XSM with passthrough. Regards, On 11/03/15 14:59, Daniel De Graaf wrote: > The definitions of static device labels must be placed at the end of the > policy.conf before passing it to checkpolicy; the existing ex

Re: [Xen-devel] [PATCH] flask/policy: fix static device labeling examples

2015-03-11 Thread Julien Grall
Hi Daniel, On 11/03/2015 14:59, Daniel De Graaf wrote: The definitions of static device labels must be placed at the end of the policy.conf before passing it to checkpolicy; the existing examples (which are commented out) are in the wrong location. Create a new file for device contexts which wi

[Xen-devel] [PATCH] flask/policy: fix static device labeling examples

2015-03-11 Thread Daniel De Graaf
The definitions of static device labels must be placed at the end of the policy.conf before passing it to checkpolicy; the existing examples (which are commented out) are in the wrong location. Create a new file for device contexts which will place them in the proper location. This also removes s