Re: [Xen-devel] [PATCH 1/5] flask/policy: split into modules

2016-06-07 Thread Konrad Rzeszutek Wilk
On Tue, Jun 07, 2016 at 03:39:59PM -0400, Daniel De Graaf wrote: > On 06/07/2016 03:22 PM, Konrad Rzeszutek Wilk wrote: > >On Mon, May 23, 2016 at 11:05:29AM -0400, Daniel De Graaf wrote: > >>This makes it easier to enable or disable parts of the XSM policy. > >> > > > >Hey Daniel, > > > >I am no e

Re: [Xen-devel] [PATCH 1/5] flask/policy: split into modules

2016-06-07 Thread Daniel De Graaf
On 06/07/2016 03:22 PM, Konrad Rzeszutek Wilk wrote: On Mon, May 23, 2016 at 11:05:29AM -0400, Daniel De Graaf wrote: This makes it easier to enable or disable parts of the XSM policy. Hey Daniel, I am no expert on this so please take it with a grain of salt. That can actually be helpful t

Re: [Xen-devel] [PATCH 1/5] flask/policy: split into modules

2016-06-07 Thread Konrad Rzeszutek Wilk
On Mon, May 23, 2016 at 11:05:29AM -0400, Daniel De Graaf wrote: > This makes it easier to enable or disable parts of the XSM policy. > Hey Daniel, I am no expert on this so please take it with a grain of salt. .. snip.. > diff --git a/tools/flask/policy/modules/default_role.te > b/tools/flask

[Xen-devel] [PATCH 1/5] flask/policy: split into modules

2016-05-23 Thread Daniel De Graaf
This makes it easier to enable or disable parts of the XSM policy. Signed-off-by: Daniel De Graaf --- tools/flask/policy/Makefile| 22 +- tools/flask/policy/modules/default_role.te | 8 + tools/flask/policy/modules/dom0.te | 74 ++ tools/fl