From mboxrd@z Thu Jan 1 00:00:00 1970 From: Julien Grall Subject: Re: [PATCH] libxl: assigned a default ssid_label (XSM label) to guests Date: Thu, 14 May 2015 15:05:15 +0100 Message-ID: <5554AB9B.304@citrix.com> References: <1431599625-9572-1-git-send-email-ian.campbell@citrix.com> <20150514115859.GA19352@zion.uk.xensource.com> <1431606724.13579.65.camel@citrix.com> <20150514123900.GB19352@zion.uk.xensource.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20150514123900.GB19352@zion.uk.xensource.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: Wei Liu , Ian Campbell Cc: Daniel De Graaf , ian.jackson@eu.citrix.com, xen-devel@lists.xen.org List-Id: xen-devel@lists.xenproject.org On 14/05/15 13:39, Wei Liu wrote: >> So how come osstest is failing? What should we do instead? >> > > AIUI current policy doesn't allow unlabeled domain to do certain things. > Maybe we can figure out a way to tune the policy to give certain > permissions to unlabeled domain. What about adding a seclabel entry in the domain configuration file? Regards, -- Julien Grall