|
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [Xen-users] acm_init: Loading default policy but not policy is installed.
Hi all,
I've successfully installed xen3.3.0 on Linux ubuntu 2.6.27.5 #1 SMP i686
GNU/Linux. I
built xen with the requisite XSM_ENABLE=y, ACM_SECURITY=y and believe I have
the correct
config parameters in the 2.6.27.5 kernel.
Boot goes smoothly, set to automatically create 2 domUs. All appears okay with
XSM/ACM...
root@ubuntu:~# xm dmesg | grep -i xsm
(XEN) XSM Framework v1.0.0 initialized
(XEN) ACM-XSM: Initializing.
root@ubuntu:~# xm dmesg | grep -i acm
(XEN) ACM-XSM: Initializing.
(XEN) acm_init: Loading default policy (CHINESE WALL AND SIMPLE TYPE
ENFORCEMENT).
> okay, but...
root@ubuntu:~# xm getpolicy
Supported security subsystems : None
No policy is installed.
(----------------------
( - try:
( 1) reboot xen w/0 domUs and ck xm getpolicy:
(----------------------
root@ubuntu:/home/bruce# xm list
Name ID Mem VCPUs State Time(s)
Domain-0 0 512 4 r----- 11.6
mail.argusology.com 1 1024 1 -b---- 23.1
www.argusology.com 2 1024 1 -b---- 23.7
root@ubuntu:/home/bruce# xm shutdown mail.argusology.com
root@ubuntu:/home/bruce# xm shutdown webServer
root@ubuntu:/home/bruce# xm list
Name ID Mem VCPUs State Time(s)
Domain-0 0 512 4 r----- 13.2
root@ubuntu:/home/bruce# /etc/init.d/xend stop
root@ubuntu:/home/bruce# /etc/init.d/xend start
root@ubuntu:/home/bruce# xm getpolicy
Supported security subsystems : None
No policy is installed.
(----------------------
( 2) check xm dmesg
(----------------------
root@ubuntu:/home/bruce# xm dmesg | more
__ __ _____ _____ ___
\ \/ /___ _ __ |___ / |___ / / _ \
\ // _ \ '_ \ |_ \ |_ \| | | |
/ \ __/ | | | ___) | ___) | |_| |
/_/\_\___|_| |_| |____(_)____(_)___/
(XEN) Xen version 3.3.0 (root@LINTON) (gcc version 4.2.4 (Ubuntu 4.2.4-1ubuntu3)
) Tue Apr 7 10:31:02 PDT 2009
(XEN) Latest ChangeSet: unavailable
(XEN) Command line: dom0_mem=512m
(XEN) Video information:
(XEN) VGA is text mode 80x25, font 8x16
(XEN) VBE/DDC methods: none; EDID transfer time: 2 seconds
(XEN) EDID info not retrieved because no DDC retrieval method detected
(XEN) Disc information:
(XEN) Found 1 MBR signatures
(XEN) Found 1 EDD information structures
(XEN) Xen-e820 RAM map:
(XEN) 0000000000000000 - 00000000000a0000 (usable)
(XEN) 0000000000100000 - 00000000cfb50000 (usable)
(XEN) 00000000cfb50000 - 00000000cfb66000 (reserved)
(XEN) 00000000cfb66000 - 00000000cfb85c00 (ACPI data)
(XEN) 00000000cfb85c00 - 00000000d0000000 (reserved)
(XEN) 00000000e0000000 - 00000000f0000000 (reserved)
(XEN) 00000000fe000000 - 0000000100000000 (reserved)
(XEN) 0000000100000000 - 0000000130000000 (usable)
(XEN) System RAM: 4090MB (4189120kB)
(XEN) ACPI: RSDP 000F2160, 0024 (r2 DELL )
(XEN) ACPI: XSDT 000F21FC, 0084 (r1 DELL PE_SC3 1 DELL 1)
(XEN) ACPI: FACP CFB83524, 00F4 (r3 DELL PE_SC3 1 DELL 1)
(XEN) ACPI: DSDT CFB66000, 4996 (r1 DELL PE_SC3 1 INTL 20050624)
(XEN) ACPI: FACS CFB85C00, 0040
(XEN) ACPI: APIC CFB83078, 0092 (r1 DELL PE_SC3 1 DELL 1)
(XEN) ACPI: SPCR CFB83130, 0050 (r1 DELL PE_SC3 1 DELL 1)
(XEN) ACPI: HPET CFB83184, 0038 (r1 DELL PE_SC3 1 DELL 1)
(XEN) ACPI: MCFG CFB831C0, 003C (r1 DELL PE_SC3 1 DELL 1)
(XEN) ACPI: WD__ CFB83200, 0134 (r1 DELL PE_SC3 1 DELL 1)
(XEN) ACPI: SLIC CFB83338, 0024 (r1 DELL PE_SC3 1 DELL 1)
(XEN) ACPI: ERST CFB6AB18, 0210 (r1 DELL PE_SC3 1 DELL 1)
(XEN) ACPI: HEST CFB6AD28, 027C (r1 DELL PE_SC3 1 DELL 1)
(XEN) ACPI: BERT CFB6A998, 0030 (r1 DELL PE_SC3 1 DELL 1)
(XEN) ACPI: EINJ CFB6A9C8, 0150 (r1 DELL PE_SC3 1 DELL 1)
(XEN) ACPI: TCPA CFB834BC, 0064 (r1 DELL PE_SC3 1 DELL 1)
(XEN) Xen heap: 9MB (9660kB)
(XEN) Domain heap initialised
(XEN) Processor #0 7:7 APIC version 20
(XEN) Processor #2 7:7 APIC version 20
(XEN) Processor #1 7:7 APIC version 20
(XEN) Processor #3 7:7 APIC version 20
(XEN) IOAPIC[0]: apic_id 4, version 32, address 0xfec00000, GSI 0-23
(XEN) Enabling APIC mode: Flat. Using 1 I/O APICs
(XEN) XSM Framework v1.0.0 initialized
(XEN) ACM-XSM: Initializing.
(XEN) acm_init: Loading default policy (CHINESE WALL AND SIMPLE TYPE
ENFORCEMENT).
(XEN) Using scheduler: SMP Credit Scheduler (credit)
(XEN) Detected 2327.595 MHz processor.
(XEN) CPU0: VMX disabled by BIOS.
(XEN) VMX: failed to initialise.
(XEN) CPU0: Intel(R) Xeon(R) CPU L5410 @ 2.33GHz stepping 0a
(XEN) Booting processor 1/2 eip 8c000
(XEN) CPU1: Intel(R) Xeon(R) CPU L5410 @ 2.33GHz stepping 0a
(XEN) Booting processor 2/1 eip 8c000
(XEN) CPU2: Intel(R) Xeon(R) CPU L5410 @ 2.33GHz stepping 0a
(XEN) Booting processor 3/3 eip 8c000
(XEN) CPU3: Intel(R) Xeon(R) CPU L5410 @ 2.33GHz stepping 0a
(XEN) Total of 4 processors activated.
(XEN) ENABLING IO-APIC IRQs
(XEN) -> Using new ACK method
(XEN) checking TSC synchronization across 4 CPUs: passed.
(XEN) Platform timer is 14.318MHz HPET
(XEN) Brought up 4 CPUs
(XEN) I/O virtualisation disabled
(XEN) *** LOADING DOMAIN 0 ***
(XEN) Xen kernel: 32-bit, PAE, lsb
(XEN) Dom0 kernel: 32-bit, PAE, lsb, paddr 0x100000 -> 0x602000
(XEN) PHYSICAL MEMORY ARRANGEMENT:
(XEN) Dom0 alloc.: 000000003c000000->000000003e000000 (122880 pages to be all
ocated)
(XEN) VIRTUAL MEMORY ARRANGEMENT:
(XEN) Loaded kernel: c0100000->c0602000
(XEN) Init. ramdisk: c0602000->c1ae0000
(XEN) Phys-Mach map: c1ae0000->c1b60000
(XEN) Start info: c1b60000->c1b60474
(XEN) Page tables: c1b61000->c1b74000
(XEN) Boot stack: c1b74000->c1b75000
(XEN) TOTAL: c0000000->c1c00000
(XEN) ENTRY ADDRESS: c0100000
(XEN) Dom0 has maximum 4 VCPUs
(XEN) Scrubbing Free RAM: ....................................done.
(XEN) Xen trace buffers: disabled
(XEN) Std. Loglevel: Errors and warnings
(XEN) Guest Loglevel: Nothing (Rate-limited: Errors and warnings)
(XEN) Xen is relinquishing VGA console.
(XEN) *** Serial input -> DOM0 (type 'CTRL-a' three times to switch input to Xen
)
(XEN) Freed 100kB init memory.
(----------------------
( 3) is the default policy really loaded? (i.e. is the config file ok?)
(----------------------
root@ubuntu:/etc/xen/acm-security/policies# less security_policy.xsd
- appears okay
(-----------------------------
( 4) check logs
(-----------------------------
- the other xen logs show nothing. Below is xend.log from when I restarted xend.
root@ubuntu:/var/log/xen# cat xend.log | grep 2009-04-12
[2009-04-12 11:28:43 6500] DEBUG (SrvServer:76) SrvServer.cleanup()
[2009-04-12 11:28:43 6500] DEBUG (XMLRPCServer:235) XMLRPCServer.cleanup()
[2009-04-12 11:28:43 6500] DEBUG (XMLRPCServer:235) XMLRPCServer.cleanup()
[2009-04-12 11:28:43 6500] DEBUG (XendDomain:615) cleanup_domains
[2009-04-12 11:28:43 6494] INFO (SrvDaemon:219) Xend exited with status 0.
[2009-04-1211:28:46 7505] INFO (SrvDaemon:331) Xend Daemon started
[2009-04-12 11:28:46 7505] INFO(SrvDaemon:335) Xend changeset: unavailable.
[2009-04-12 11:28:47 7505] DEBUG(XendDomainInfo:137)
XendDomainInfo.recreate({'max_vcpu_id': 3, 'cpu_time': 14236978880L, 'ssidref':
65537,
'hvm': 0, 'shutdown_reason': 0, 'dying': 0, 'online_vcpus': 4, 'domid': 0,
'paused': 0,
'crashed': 0, 'running': 1, 'maxmem_kb': 4294967292L, 'shutdown': 0, 'mem_kb':
524288L,
'handle': [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0], 'blocked': 0,
'name':
'Domain-0'})
[2009-04-12 11:28:47 7505] INFO (XendDomainInfo:154) Recreating domain 0, UUID
00000000-0000-0000-0000-000000000000. at /local/domain/0
[2009-04-1211:28:47 7505] DEBUG (XendDomain:447) Adding Domain: 0
[2009-04-12 11:28:47 7505] DEBUG(XendDomain:383) number of vcpus to use is 0
[2009-04-12 11:28:47 7505] DEBUG(XendDomainInfo:1443)
XendDomainInfo.handleShutdownWatch
[2009-04-12 11:28:47 7505]WARNING (XendAPI:684) API call: VBD.set_device not
found
[2009-04-12 11:28:47 7505]WARNING (XendAPI:684) API call: VBD.set_type not
found
[2009-04-12 11:28:47 7505] WARNING(XendAPI:684) API call:
session.get_all_records not found
[2009-04-12 11:28:47 7505]WARNING (XendAPI:684) API call: event.get_record not
found
[2009-04-12 11:28:47 7505]WARNING (XendAPI:684) API call: event.get_all not
found
[2009-04-12 11:28:47 7505] WARNING(XendAPI:684) API call: VM.get_auto_power_on
not found
[2009-04-12 11:28:47 7505] WARNING(XendAPI:684) API call: VM.set_auto_power_on
not found
[2009-04-12 11:28:47 7505] WARNING(XendAPI:684) API call: VIF.get_network not
found
[2009-04-12 11:28:47 7505] WARNING(XendAPI:684) API call: VIF.set_device not
found
[2009-04-12 11:28:47 7505] WARNING(XendAPI:684) API call: VIF.set_MAC not found
[2009-04-12 11:28:47 7505] WARNING(XendAPI:684) API call: VIF.set_MTU not found
[2009-04-12 11:28:47 7505] WARNING(XendAPI:684) API call: debug.get_all not
found
[2009-04-12 11:28:47 7505] INFO (XMLRPCServer:156) Opening Unix domain socket
XML-RPC
server on /var/run/xend/xmlrpc.sock. [2009-04-12 11:28:47 7505] INFO
(XMLRPCServer:156)
Opening Unix domain socket XML-RPCserver on /var/run/xend/xen-api.sock;
authentication has
been disabled for this server.
root@ubuntu:/var/log/xen#
I can't see anything wrong (with XSM/ACM). I was wondering if someone could
point me where
to look next to solve my issue.
Thanks,
Bruce
--
Bruce Linton
Argusology, LLC
925-935-6160 office
925-262-3664 mobile
bruce@xxxxxxxxxxxxxx
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users
|
 |
Lists.xenproject.org is hosted with RackSpace, monitoring our |