Re: [Xen-devel] [PATCH] flask/policy: fix static device labeling examples

2015-03-18 Thread Ian Campbell
On Wed, 2015-03-11 at 10:59 -0400, Daniel De Graaf wrote: The definitions of static device labels must be placed at the end of the policy.conf before passing it to checkpolicy; the existing examples (which are commented out) are in the wrong location. Create a new file for device contexts

Re: [Xen-devel] [PATCH] flask/policy: fix static device labeling examples

2015-03-17 Thread Julien Grall
(CC Ian and Jan) Hi, Is there any blocker to push this patch? It's useful for using XSM with passthrough. Regards, On 11/03/15 14:59, Daniel De Graaf wrote: The definitions of static device labels must be placed at the end of the policy.conf before passing it to checkpolicy; the existing

Re: [Xen-devel] [PATCH] flask/policy: fix static device labeling examples

2015-03-17 Thread Jan Beulich
On 17.03.15 at 14:03, julien.gr...@linaro.org wrote: (CC Ian and Jan) This is mostly about tools stuff: docs/misc/xsm-flask.txt | 31 +++ tools/flask/policy/Makefile | 3 ++- tools/flask/policy/policy/device_contexts| 32

[Xen-devel] [PATCH] flask/policy: fix static device labeling examples

2015-03-11 Thread Daniel De Graaf
The definitions of static device labels must be placed at the end of the policy.conf before passing it to checkpolicy; the existing examples (which are commented out) are in the wrong location. Create a new file for device contexts which will place them in the proper location. This also removes

Re: [Xen-devel] [PATCH] flask/policy: fix static device labeling examples

2015-03-11 Thread Julien Grall
Hi Daniel, On 11/03/2015 14:59, Daniel De Graaf wrote: The definitions of static device labels must be placed at the end of the policy.conf before passing it to checkpolicy; the existing examples (which are commented out) are in the wrong location. Create a new file for device contexts which