Re: [Xen-users] Backport xen-4.8 from Stretch to Jessie, adding flask support

[Ian Jackson <ian.jackson@xxxxxxxxxxxxx>]

Mark Pryor writes ("Backport xen-4.8 from Stretch to Jessie, adding flask 
support"):
> Responding to this post:
> https://lists.xenproject.org/archives/html/xen-users/2017-05/msg00091.html
> 
> I started with below sources from the Stretch repo:
> 
> http://http.debian.net/debian/pool/main/x/xen/xen_4.8.1-1+deb9u1.dsc
> http://http.debian.net/debian/pool/main/x/xen/xen_4.8.1.orig.tar.gz
> http://http.debian.net/debian/pool/main/x/xen/xen_4.8.1-1+deb9u1.debian.tar.xz

Hi.  Thanks for sharing your work.

> No changes to Config.mk were needed.
> 
> My backport sources are here:
> http://prymar56.org//xen/debian/jessie-bp/48x/source/

I'm kind of surprised that enabling XSM and FLASK didn't require a
change to Config.mk.

FYI the reason it's not enabled upstream is that we haven't got a
process for auditing the (default) policy to check that it doesn't
have any loopholes; conversely the default (non-XSM) checks in the
hypervisor code do get reviewed.

> The debian build of Xen uses a truncated source, with all qemu* & seabios
> sources removed.
> There is no support for oxenstored (ocaml) nor
> is there any OVMF support.
> The systemd init system in upstream is also not included.

Not that this is very relevant to your work here, but I intend to
improve some of these things in buster.

Regards,
Ian.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxx
https://lists.xen.org/xen-users