WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xense-devel

[Xense-devel] [PATCH] sHype Policy Processor for Xen

To: xense-devel@xxxxxxxxxxxxxxxxxxx, steven.hand@xxxxxxxxxxxx
Subject: [Xense-devel] [PATCH] sHype Policy Processor for Xen
From: Ray Valdez <rvaldez@xxxxxxxxxx>
Date: Mon, 20 Jun 2005 16:20:31 -0400
Cc: xen-devel@xxxxxxxxxxxxxxxxxxx, Stefan Berger <stefanb@xxxxxxxxxx>
Delivery-date: Mon, 20 Jun 2005 20:19:28 +0000
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
List-help: <mailto:xense-devel-request@lists.xensource.com?subject=help>
List-id: "A discussion list for those developing security enhancements for Xen." <xense-devel.lists.xensource.com>
List-post: <mailto:xense-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xense-devel>, <mailto:xense-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xense-devel>, <mailto:xense-devel-request@lists.xensource.com?subject=unsubscribe>
Sender: xense-devel-bounces@xxxxxxxxxxxxxxxxxxx
Attached you will find the sHype: Java Policy Processor.

The Java Policy Processor is a Java application that translates an XML
representation of a security policy into a binary format that can be loaded
into sHype.  The Policy Processor allows you to create your own sHype Type
Enforcement and Chinese wall security policy.  XmlToBin, the Java Policy
Processor, creates a binary file (e.g., binaryPolicyFile)  from an XML
policy file. This binary file can be activated in sHype via the policytool
command:
xeno-unstable.bk/tools/policy/policy_tool loadpolicy binaryPolicyFile.
Please refer to [PATCH] sHype access control architecture for Xen.

Note that the use of this tool is optional, since the policy_tool included
in sHype has a hard-coded policy that you can set with
 ./policy_tool setpolicy.

-Ray

Signed-off by Ray Valdez <rvaldez@xxxxxxxxxx>
(See attached file: policyprocessor.tgz)

Attachment: policyprocessor.tgz
Description: Binary data

_______________________________________________
Xense-devel mailing list
Xense-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xense-devel
<Prev in Thread] Current Thread [Next in Thread>
  • [Xense-devel] [PATCH] sHype Policy Processor for Xen, Ray Valdez <=