[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] [PATCH 2/2] xen/xsm: Rename CONIFIG_XSM_POLICY to CONFIG_XSM_FLASK_POLICY


  • To: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>, Xen-devel <xen-devel@xxxxxxxxxxxxx>
  • From: Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>
  • Date: Fri, 17 Aug 2018 14:57:44 -0400
  • Cc: Sergey Dyasli <sergey.dyasli@xxxxxxxxxx>, Stefano Stabellini <sstabellini@xxxxxxxxxx>, Wei Liu <wei.liu2@xxxxxxxxxx>, George Dunlap <George.Dunlap@xxxxxxxxxxxxx>, Xin Li <xin.li@xxxxxxxxxx>, Tim Deegan <tim@xxxxxxx>, Jan Beulich <JBeulich@xxxxxxxx>, Ming Lu <ming.lu@xxxxxxxxxx>
  • Delivery-date: Fri, 17 Aug 2018 18:57:53 +0000
  • Ironport-phdr: 9a23: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
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>

On 06/26/2018 07:09 AM, Andrew Cooper wrote:
The embedded policy is specific flask, so update the infrastructure to reflect
this.

Signed-off-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>

This one actually has a history of being shared between FLASK and ACM (the
now-removed alternative to FLASK in earlier versions of Xen).  However, the
current policy generation is very specific to FLASK, and it would be useful
to allow multiple security modules to each have their own default policy.

Overall, I think it's a useful change.  Is there a reason you chose the
prefix "xsm_init_flask" over "xsm_flask_init"?  The latter may be more
amenable to grepping.

Either way,

Acked-by: Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/mailman/listinfo/xen-devel

 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.