 Home |
Products |
Support |
Community |
News |
xen-devel
[Xen-devel] [PATCH] ACM: adding get_ssid command and cleanup
| To: | xen-devel@xxxxxxxxxxxxxxxxxxx |
|---|---|
| Subject: | [Xen-devel] [PATCH] ACM: adding get_ssid command and cleanup |
| From: | Reiner Sailer <sailer@xxxxxxxxxx> |
| Date: | Thu, 1 Sep 2005 23:26:30 -0400 |
| Cc: | Stefan Berger <stefanb@xxxxxxxxxx>, xense-devel@xxxxxxxxxxxxxxxxxxx |
| Delivery-date: | Fri, 02 Sep 2005 03:24:34 +0000 |
| Envelope-to: | www-data@xxxxxxxxxxxxxxxxxxx |
| List-help: | <mailto:xen-devel-request@lists.xensource.com?subject=help> |
| List-id: | Xen developer discussion <xen-devel.lists.xensource.com> |
| List-post: | <mailto:xen-devel@lists.xensource.com> |
| List-subscribe: | <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe> |
| List-unsubscribe: | <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe> |
| Sender: | xen-devel-bounces@xxxxxxxxxxxxxxxxxxx |
|
This patch: * adds a get_ssid ACM command that allows privileged domains to retrieve types for either a given ssid reference or a given domain id (of a running domain); this command can be used to extend access control into device domains, e.g., to control network traffic currently moving through Domain 0 uncontrolled by the ACM policy * adds a script getlabel.sh that allows users inside Dom0 to retrieve the label for a given ssid reference or a given domain id (multiple labels might map onto a single ssid reference) * cleans up label-related code in tools/security by merging common functions into labelfuncs.sh * cleans up ACM code related to above changes (eventually approximating a common coding style) Comments welcome. Thanks Reiner Signed-off-by Reiner Sailer <sailer@xxxxxxxxxx> Signed-off by Stefan Berger <stefanb@xxxxxxxxxx>
_______________________________________________ Xen-devel mailing list Xen-devel@xxxxxxxxxxxxxxxxxxx http://lists.xensource.com/xen-devel |
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RE: [Xen-devel] [PATCH] Re: SMP dom0 with 8 cpus of i386, Kamble, Nitin A |
|---|---|
| Next by Date: | [Xen-devel] [PATCH] Allow install.sh to run from read-only file system, Anthony Liguori |
| Previous by Thread: | Re: [Xen-devel] BUG? domu network interface configuration, Michal Ostrowski |
| Next by Thread: | Re: [Xense-devel] [PATCH] ACM: adding get_ssid command and cleanup, David Palmer |
| Indexes: | [Date] [Thread] [Top] [All Lists] |
