From: "Daniel P. Smith" <dpsmith@apertussolutions.com>
To: Andrew Cooper <andrew.cooper3@citrix.com>,
xen-devel@lists.xenproject.org
Cc: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Subject: Re: [PATCH v2 03/10] xsm: remove the ability to disable flask
Date: Thu, 15 Jul 2021 13:17:27 -0400 [thread overview]
Message-ID: <9b0167fe-39a7-378b-d080-c14c2da0aaa4@apertussolutions.com> (raw)
In-Reply-To: <d7b3baaf-15b2-d991-a380-9524ad37a118@citrix.com>
On 7/12/21 7:22 PM, Andrew Cooper wrote:
> On 12/07/2021 21:32, Daniel P. Smith wrote:
>> The flask XSM module provided the ability to switch from flask back to
>> the dummy XSM module during runtime. With this removal the only way to
>> switch between XSM modules is at boot time.
>>
>> Signed-off-by: Daniel P. Smith <dpsmith@apertussolutions.com>
>
> This patch wants reordering ahead of "xsm: refactor xsm_ops handling"
> which will reduce the churn in that patch.
Ack
> In addition, you want:
>
> diff --git a/xen/include/public/xsm/flask_op.h
> b/xen/include/public/xsm/flask_op.h
> index 16af7bc22f75..b41dd6dac894 100644
> --- a/xen/include/public/xsm/flask_op.h
> +++ b/xen/include/public/xsm/flask_op.h
> @@ -188,7 +188,7 @@ struct xen_flask_op {
> #define FLASK_SETBOOL 12
> #define FLASK_COMMITBOOLS 13
> #define FLASK_MLS 14
> -#define FLASK_DISABLE 15
> +#define FLASK_DISABLE 15 /* No longer implemented */
> #define FLASK_GETAVC_THRESHOLD 16
> #define FLASK_SETAVC_THRESHOLD 17
> #define FLASK_AVC_HASHSTATS 18
>
> to match the removal of FLASK_USER in c/s 559f439bfa3bf
Ack
next prev parent reply other threads:[~2021-07-15 17:17 UTC|newest]
Thread overview: 44+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-07-12 20:32 [PATCH v2 00/10] xsm: refactoring xsm hooks Daniel P. Smith
2021-07-12 20:32 ` [PATCH v2 01/10] xen: Implement xen/alternative-call.h for use in common code Daniel P. Smith
2021-07-12 23:48 ` Andrew Cooper
2021-07-13 6:28 ` Jan Beulich
2021-07-13 8:36 ` Andrew Cooper
2021-07-13 8:53 ` Jan Beulich
2021-07-14 15:35 ` Jan Beulich
2021-07-12 20:32 ` [PATCH v2 02/10] xsm: refactor xsm_ops handling Daniel P. Smith
2021-07-12 23:39 ` Andrew Cooper
2021-07-14 15:54 ` Jan Beulich
2021-07-15 17:16 ` Daniel P. Smith
2021-07-12 20:32 ` [PATCH v2 03/10] xsm: remove the ability to disable flask Daniel P. Smith
2021-07-12 23:22 ` Andrew Cooper
2021-07-15 17:17 ` Daniel P. Smith [this message]
2021-07-14 15:58 ` Jan Beulich
2021-07-15 17:19 ` Daniel P. Smith
2021-07-12 20:32 ` [PATCH v2 04/10] xsm: convert xsm_ops hook calls to alternative call Daniel P. Smith
2021-07-12 23:44 ` Andrew Cooper
2021-07-15 17:20 ` Daniel P. Smith
2021-07-12 20:32 ` [PATCH v2 05/10] xsm: decouple xsm header inclusion selection Daniel P. Smith
2021-07-12 20:32 ` [PATCH v2 06/10] xsm: enable xsm to always be included Daniel P. Smith
2021-07-19 10:24 ` Jan Beulich
2021-07-25 20:47 ` Daniel P. Smith
2021-08-03 7:08 ` Jan Beulich
2021-07-12 20:32 ` [PATCH v2 07/10] xsm: drop generic event channel labeling Daniel P. Smith
2021-07-12 23:52 ` Andrew Cooper
2021-07-15 17:26 ` Daniel P. Smith
2021-07-16 7:03 ` Jan Beulich
2021-07-12 20:32 ` [PATCH v2 08/10] xsm: remove xsm_default_t from hook definitions Daniel P. Smith
2021-07-16 7:23 ` Jan Beulich
2021-07-16 14:15 ` Andrew Cooper
2021-07-16 14:55 ` Jan Beulich
2021-07-16 7:37 ` Jan Beulich
2021-07-27 13:39 ` Ian Jackson
2021-08-06 21:41 ` Daniel P. Smith
2021-08-10 8:39 ` Jan Beulich
2021-08-26 9:42 ` Jan Beulich
2021-07-12 20:32 ` [PATCH v2 09/10] xsm: expand the function related macros in dummy.h Daniel P. Smith
2021-07-16 7:34 ` Jan Beulich
2021-07-24 20:07 ` Daniel P. Smith
2021-07-24 20:43 ` Daniel P. Smith
2021-08-03 7:23 ` Jan Beulich
2021-07-12 20:32 ` [PATCH v2 10/10] xsm: removing the XSM_ASSERT_ACTION macro Daniel P. Smith
2021-07-12 23:12 ` [PATCH v2 00/10] xsm: refactoring xsm hooks Andrew Cooper
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=9b0167fe-39a7-378b-d080-c14c2da0aaa4@apertussolutions.com \
--to=dpsmith@apertussolutions.com \
--cc=andrew.cooper3@citrix.com \
--cc=dgdegra@tycho.nsa.gov \
--cc=xen-devel@lists.xenproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.