Re: [Xen-devel] [XSM] Setting of ACM Policy

[Dilshan Jayarathna <dilshan.jayarathna@xxxxxxxxx>]

Hi Suzaki,

It looks like a faulty build. (I could be wrong)
If you've set ACM_SECURITY ?= y in Config.mk when you building xen, you must get ACM as the supported security subsystem when you run 'xm getpolicy'.

If you just run 'xm setpolicy', you should get error but it also tells you the supported policy type
(...The only policytype that is currently supported is 'ACM'...)

You can use xensec_ezpolicy to create a policy in xml format. Then 'xm setpolicy...' to covert xml to binary format and to activate the policy.

But if the XSM is not build properly, none of the above will work.

Hope this helps.

Cheers,
Dilshan

Kuniyasu Suzaki wrote:

Hello,

Please tell me how to setup ACM of XSM.
I could build a XSM but it doesn't work well.
  # xm getpolicy
  Supported security subsystems: None

I guess it is caused by the lack of a policy file.
I referred the following manual and tried to create poly file. 
  http://www.cl.cam.ac.uk/research/srg/netos/xen/readmes/user.pdf

The manual tells that the following command create a policy file
"mytest.bin".
  # xm setpolicy ACM mytest

However the command doesn't work well. Please tell me create a policy file. 
I tried on Xen 3.2.1. Is the step obsolete?

------
suzaki

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel
  

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel