Re: [Xen-devel] [PATCH OSSTEST] Debian: Support runvar to set flask mode

[Ian Jackson <Ian.Jackson@xxxxxxxxxxxxx>]

Ian Campbell writes ("[PATCH OSSTEST] Debian: Support runvar to set flask 
mode"):
> Currently it is hardcoding to enforcing but it might be useful to
> run with e.g.  permissive or even disabled (aka dummy mode)
...
> --- a/overlay/etc/grub.d/20_linux_xen
> +++ b/overlay/etc/grub.d/20_linux_xen
> @@ -93,7 +93,9 @@ linux_entry ()
>        if test ! -e "${xen_dirname}/${xenpolicy}" ; then
>         return
>        fi
> -      xen_args=`echo $xen_args flask=enforcing`
> +      if test -n "${GRUB_XEN_FLASK_MODE}" ; then
> +          xen_args=`echo $xen_args flask=${GRUB_XEN_FLASK_MODE}`
> +      fi

I thought we were hoping to eventually do away with our copy of this
file.  Has this change gone upstream ?

Ian.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel