At the moment, there is a problem with ACM: it is impossible to set ACM security model at built-time, so even with ACM is chosen to build, the default policy is NULL, which is useless. This patch propose a solution to this problem: build process will generate a header file (include/public/acm_policy.h) based on the value set in xen/Makefile or at command-line, and gets acm.h included it. Signed-off-by: Nguyen Anh Quynh $ diffstat acm6.patch xen/Makefile | 27 +++++++++++++++++++++++++-- xen/include/public/acm.h | 9 +++------ 2 files changed, 28 insertions(+), 8 deletions(-)