Re: [Xen-devel] [OSSTEST PATCH RFC v1 11/12] ts-debian-install: add in seclabel if XSM is enabled

[Ian Campbell <Ian.Campbell@xxxxxxxxxx>]

On Mon, 2014-09-22 at 15:12 +0100, Wei Liu wrote:
> ... otherwise the guest cannot be created.

is this setting harmful if xsm isn't on?

> 
> Also changed cfg_xend to cfg while I was there.
> 
> Signed-off-by: Wei Liu <wei.liu2@xxxxxxxxxx>
> ---
>  ts-debian-install |   11 +++++++++--
>  1 file changed, 9 insertions(+), 2 deletions(-)
> 
> diff --git a/ts-debian-install b/ts-debian-install
> index 58ea743..c42ae09 100755
> --- a/ts-debian-install
> +++ b/ts-debian-install
> @@ -89,8 +89,15 @@ END
>              $initrd_opt \\
>              $archarg
>  END
> -    my $cfg_xend= "/etc/xen/$gho->{Name}.cfg";
> -    store_runvar("$gho->{Guest}_cfgpath", $cfg_xend);
> +    my $cfg= "/etc/xen/$gho->{Name}.cfg";
> +
> +    if ($r{enable_xsm} =~ m/y/) {
> +     target_cmd_root($ho, <<"END");
> +echo "seclabel='system_u:system_r:domU_t'" >> $cfg
> +END
> +    }
> +
> +    store_runvar("$gho->{Guest}_cfgpath", $cfg);
>      store_runvar("$gho->{Guest}_swap_lv", "$gho->{Name}-swap");
>  }
>  



_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel