WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

[Xen-devel] [PATCH] [ACM] Support for running unlabeled domains alongsid

To: xen-devel <xen-devel@xxxxxxxxxxxxxxxxxxx>
Subject: [Xen-devel] [PATCH] [ACM] Support for running unlabeled domains alongside labeled ones
From: Stefan Berger <stefanb@xxxxxxxxxx>
Date: Thu, 02 Aug 2007 13:35:01 -0400
Cc: Keir Fraser <keir@xxxxxxxxxxxxx>, sailer@xxxxxxxxxx
Delivery-date: Thu, 02 Aug 2007 10:24:58 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
This patch adds support for running unlabeled domains alongside labeled
ones, if the policy contains a VM label with name '__UNLABELED__' and an
STE type with the same name.
The ezpolicy tool has been modified to automatically suggest a policy
under which unlabeled domains can run. The user may delete this, if this
is not desired.

The patch also contains some cleanups and a fix in the hypervisor code.

Signed-off-by: Stefan Berger <stefanb@xxxxxxxxxx>

Attachment: acm_unlabeled_domains_support.diff
Description: Text Data

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel
<Prev in Thread] Current Thread [Next in Thread>
  • [Xen-devel] [PATCH] [ACM] Support for running unlabeled domains alongside labeled ones, Stefan Berger <=