Re: [Xen-devel] [OSSTEST PATCH v2 11/12] ts-debian-install: add in seclabel if XSM is enabled

[Ian Jackson <Ian.Jackson@xxxxxxxxxxxxx>]

Wei Liu writes ("Re: [OSSTEST PATCH v2 11/12] ts-debian-install: add in 
seclabel if XSM is enabled"):
> On Fri, Oct 10, 2014 at 05:41:08PM +0100, Ian Jackson wrote:
> > xl should do whatever is necessary to implement your wishes (assuming
> > your wishes are reasonable, of course).
> 
> I agree. And it's reasonable for hypervisor to reject this request. I
> think this is policy related.

Indeed, I have no objection to the hypervisor's policy setup.

> > If guests have to have seclabels, xl should arrange to give them
> > seclabels.  If you don't specify the seclabel, xl should figure
> > out what seclabel to give them.
> 
> I don't see it this way as there's no documentation on what the
> "default seclabel" is.

Maybe it should be documented, or configurable.

> I think this is one is for Daniel.

Yes.

In the meantime I am happy to take your series without these
seclabel-in-config patches.  The result will be some tests which fail
until the underlying problem is resolved.

Ian.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel