This unifies the flask_enforcing and flask_enabled boot parameters into
a single parameter with additional states. Defined options are:
force - require policy to be loaded at boot time and enforce it
late - bootloader policy is not used; later loadpolicy is enforcing
permissive - a missing or
This unifies the flask_enforcing and flask_enabled boot parameters into
a single parameter with additional states. Defined options are:
force - require policy to be loaded at boot time and enforce it
late - bootloader policy is not used; later loadpolicy is enforcing
permissive - a missing or
>>> On 03.03.15 at 18:00, wrote:
> --- a/docs/misc/xsm-flask.txt
> +++ b/docs/misc/xsm-flask.txt
> @@ -400,28 +400,26 @@ may require multiple passes to find all required ranges.
> Additional notes on XSM:FLASK
> -
>
> -1) xen command line parameters
> -
> - a) f
On Tue, Mar 03, 2015 at 12:00:19PM -0500, Daniel De Graaf wrote:
[...]
> diff --git a/docs/man/xl.pod.1 b/docs/man/xl.pod.1
> index 6b89ba8..48b8f98 100644
> --- a/docs/man/xl.pod.1
> +++ b/docs/man/xl.pod.1
> @@ -1441,8 +1441,8 @@ Determine if the FLASK security module is loaded and
> enforcing i
On 03/06/2015 07:22 AM, Wei Liu wrote:
On Tue, Mar 03, 2015 at 12:00:19PM -0500, Daniel De Graaf wrote:
[...]
diff --git a/docs/man/xl.pod.1 b/docs/man/xl.pod.1
index 6b89ba8..48b8f98 100644
--- a/docs/man/xl.pod.1
+++ b/docs/man/xl.pod.1
@@ -1441,8 +1441,8 @@ Determine if the FLASK security mod
On 06/03/15 21:43, Daniel De Graaf wrote:
> This unifies the flask_enforcing and flask_enabled boot parameters into
> a single parameter with additional states. Defined options are:
>
> force - require policy to be loaded at boot time and enforce it
> late - bootloader policy is not used; later
>>> On 06.03.15 at 22:43, wrote:
> @@ -60,6 +61,26 @@ extern int ss_initialized;
>
> extern struct xsm_operations *original_ops;
>
> +static void __init parse_flask_param(char *s)
> +{
> +if ( !strcmp(s, "force") || !strcmp(s, "enforcing") )
So what's the point of allowing two values wit
