[Xen-devel] [PATCH] [ACM] Support for running unlabeled domains alongside labeled ones

[Stefan Berger <stefanb@xxxxxxxxxx>]

This patch adds support for running unlabeled domains alongside labeled
ones, if the policy contains a VM label with name '__UNLABELED__' and an
STE type with the same name.
The ezpolicy tool has been modified to automatically suggest a policy
under which unlabeled domains can run. The user may delete this, if this
is not desired.

The patch also contains some cleanups and a fix in the hypervisor code.

Signed-off-by: Stefan Berger <stefanb@xxxxxxxxxx>

Attachment: acm_unlabeled_domains_support.diff
Description: Text Data

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel