Re: [PATCH v9 3/3] xsm: refactor flask sid alloc and domain check

2022-07-05 Thread Daniel P. Smith
On 7/5/22 09:03, Jason Andryuk wrote: > On Wed, Jun 29, 2022 at 10:22 PM Daniel P. Smith > wrote: >> >> The function flask_domain_alloc_security() is where a default sid should be >> assigned to a domain under construction. For reasons unknown, the initial >> domain would be assigned unlabeled_t a

Re: [PATCH v9 3/3] xsm: refactor flask sid alloc and domain check

2022-07-05 Thread Jason Andryuk
On Wed, Jun 29, 2022 at 10:22 PM Daniel P. Smith wrote: > > The function flask_domain_alloc_security() is where a default sid should be > assigned to a domain under construction. For reasons unknown, the initial > domain would be assigned unlabeled_t and then fixed up under > flask_domain_create()

Re: [PATCH v9 3/3] xsm: refactor flask sid alloc and domain check

2022-06-30 Thread Daniel P. Smith
On 6/30/22 04:40, Henry Wang wrote: > Hi Daniel, > >> -Original Message- >> Subject: [PATCH v9 3/3] xsm: refactor flask sid alloc and domain check >> >> The function flask_domain_alloc_security() is where a default sid should be >> assigned to a do

Re: [PATCH v9 3/3] xsm: refactor flask sid alloc and domain check

2022-06-30 Thread Daniel P. Smith
On 6/30/22 02:14, Jan Beulich wrote: > Just a two nits - while the change looks plausible, I'm afraid I'm > not qualified to properly review it. > > On 30.06.2022 04:21, Daniel P. Smith wrote: >> The function flask_domain_alloc_security() is where a default sid should be >> assigned to a domain un

RE: [PATCH v9 3/3] xsm: refactor flask sid alloc and domain check

2022-06-30 Thread Henry Wang
Hi Daniel, > -Original Message- > Subject: [PATCH v9 3/3] xsm: refactor flask sid alloc and domain check > > The function flask_domain_alloc_security() is where a default sid should be > assigned to a domain under construction. For reasons unknown, the initial > domain

Re: [PATCH v9 3/3] xsm: refactor flask sid alloc and domain check

2022-06-29 Thread Jan Beulich
Just a two nits - while the change looks plausible, I'm afraid I'm not qualified to properly review it. On 30.06.2022 04:21, Daniel P. Smith wrote: > The function flask_domain_alloc_security() is where a default sid should be > assigned to a domain under construction. For reasons unknown, the init

[PATCH v9 3/3] xsm: refactor flask sid alloc and domain check

2022-06-29 Thread Daniel P. Smith
The function flask_domain_alloc_security() is where a default sid should be assigned to a domain under construction. For reasons unknown, the initial domain would be assigned unlabeled_t and then fixed up under flask_domain_create().  With the introduction of xenboot_t it is now possible to disting