Re: [Xen-devel] [PATCH v2] xsm: add device tree labeling support

2015-03-17 Thread Ian Campbell
On Thu, 2015-03-12 at 16:42 -0400, Daniel De Graaf wrote: This adds support in the hypervisor and policy build toolchain for Xen/Flask policy version 30, which adds the ability to label ARM device tree nodes and expands the IOMEM ocontext entries to 64 bits. Signed-off-by: Daniel De Graaf

Re: [Xen-devel] [PATCH v2] xsm: add device tree labeling support

2015-03-13 Thread Julien Grall
Hi Jan, On 13/03/2015 09:23, Jan Beulich wrote: On 12.03.15 at 21:42, dgde...@tycho.nsa.gov wrote: @@ -1999,11 +2055,23 @@ int policydb_read(struct policydb *p, void *fp) Old xen policy does not support iomemcon); goto bad; } -

Re: [Xen-devel] [PATCH v2] xsm: add device tree labeling support

2015-03-13 Thread Daniel De Graaf
On 03/13/2015 06:05 AM, Julien Grall wrote: Hi Jan, On 13/03/2015 09:23, Jan Beulich wrote: On 12.03.15 at 21:42, dgde...@tycho.nsa.gov wrote: @@ -1999,11 +2055,23 @@ int policydb_read(struct policydb *p, void *fp) Old xen policy does not support iomemcon);

Re: [Xen-devel] [PATCH v2] xsm: add device tree labeling support

2015-03-13 Thread Julien Grall
Hi Daniel, On 12/03/2015 20:42, Daniel De Graaf wrote: This adds support in the hypervisor and policy build toolchain for Xen/Flask policy version 30, which adds the ability to label ARM device tree nodes and expands the IOMEM ocontext entries to 64 bits. Signed-off-by: Daniel De Graaf

[Xen-devel] [PATCH v2] xsm: add device tree labeling support

2015-03-12 Thread Daniel De Graaf
This adds support in the hypervisor and policy build toolchain for Xen/Flask policy version 30, which adds the ability to label ARM device tree nodes and expands the IOMEM ocontext entries to 64 bits. Signed-off-by: Daniel De Graaf dgde...@tycho.nsa.gov --- tools/flask/policy/Makefile |