[Xen-devel] [PATCH] [ACM] Check a domain's authorization to run

[Stefan Berger <stefanb@xxxxxxxxxx>]

A domain is only authorized to run if it has a superset of Simple Type
Enforcement Types in its VM label compared to that of Domain-0, which
itself may not have all STEs available in a policy. This patch adds a
check for this into Xend and the necessary code support into Xen.

Signed-off-by: Stefan Berger <stefanb@xxxxxxxxxx>

Attachment: acm_create_domain_authorization_check.diff
Description: Text Data

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel