[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-users] Backport xen-4.8 from Stretch to Jessie, adding flask support

Mark Pryor writes ("Backport xen-4.8 from Stretch to Jessie, adding flask 
> Responding to this post:
> https://lists.xenproject.org/archives/html/xen-users/2017-05/msg00091.html
> I started with below sources from the Stretch repo:
> http://http.debian.net/debian/pool/main/x/xen/xen_4.8.1-1+deb9u1.dsc
> http://http.debian.net/debian/pool/main/x/xen/xen_4.8.1.orig.tar.gz
> http://http.debian.net/debian/pool/main/x/xen/xen_4.8.1-1+deb9u1.debian.tar.xz

Hi.  Thanks for sharing your work.

> No changes to Config.mk were needed.
> My backport sources are here:
> http://prymar56.org//xen/debian/jessie-bp/48x/source/

I'm kind of surprised that enabling XSM and FLASK didn't require a
change to Config.mk.

FYI the reason it's not enabled upstream is that we haven't got a
process for auditing the (default) policy to check that it doesn't
have any loopholes; conversely the default (non-XSM) checks in the
hypervisor code do get reviewed.

> The debian build of Xen uses a truncated source, with all qemu* & seabios
> sources removed.
> There is no support for oxenstored (ocaml) nor
> is there any OVMF support.
> The systemd init system in upstream is also not included.

Not that this is very relevant to your work here, but I intend to
improve some of these things in buster.


Xen-users mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.