Re: [Xen-devel] [PATCH] libxl: assigned a default ssid_label (XSM label) to guests

[Ian Campbell <ian.campbell@xxxxxxxxxx>]

On Thu, 2015-05-14 at 15:05 +0100, Julien Grall wrote:
> On 14/05/15 13:39, Wei Liu wrote:
> >> So how come osstest is failing? What should we do instead?
> >>
> > 
> > AIUI current policy doesn't allow unlabeled domain to do certain things.
> > Maybe we can figure out a way to tune the policy to give certain
> > permissions to unlabeled domain.
> 
> What about adding a seclabel entry in the domain configuration file?

I think Ian J has argued against that, but I will let him speak for
himself in case I'm misremembering.

Ian.


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel