Re: [Xen-devel] [PATCH OSSTEST] Debian: Support runvar to set flask mode

[Ian Campbell <ian.campbell@xxxxxxxxxx>]

On Mon, 2015-12-14 at 18:58 +0000, Ian Jackson wrote:
> Ian Campbell writes ("[PATCH OSSTEST] Debian: Support runvar to set flask
> mode"):
> > Currently it is hardcoding to enforcing but it might be useful to
> > run with e.g.ÂÂpermissive or even disabled (aka dummy mode)
> ...
> > --- a/overlay/etc/grub.d/20_linux_xen
> > +++ b/overlay/etc/grub.d/20_linux_xen
> > @@ -93,7 +93,9 @@ linux_entry ()
> > ÂÂÂÂÂÂÂif test ! -e "${xen_dirname}/${xenpolicy}" ; then
> > Â   ÂÂreturn
> > ÂÂÂÂÂÂÂfi
> > -ÂÂÂÂÂÂxen_args=`echo $xen_args flask=enforcing`
> > +ÂÂÂÂÂÂif test -n "${GRUB_XEN_FLASK_MODE}" ; then
> > +ÂÂÂÂÂÂÂÂÂÂxen_args=`echo $xen_args flask=${GRUB_XEN_FLASK_MODE}`
> > +ÂÂÂÂÂÂfi
> 
> I thought we were hoping to eventually do away with our copy of this
> file.ÂÂHas this change gone upstream ?

Sadly there has not been a peep from the maintainers onÂhttp://savannah.gnu
.org/bugs/?43420

Perhaps we should also send the patch to the upstream ML?

Ian.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel