From: Daniel De Graaf <dgdegra@tycho.nsa.gov> To: xen-devel@lists.xenproject.org Cc: steve@zentific.com, Daniel De Graaf <dgdegra@tycho.nsa.gov>, cardoe@cardoe.com Subject: [PATCH 5/5] flask/policy: comment out unused xenstore example Date: Mon, 23 May 2016 11:05:33 -0400 [thread overview] Message-ID: <1464015933-26891-6-git-send-email-dgdegra@tycho.nsa.gov> (raw) In-Reply-To: <1464015933-26891-1-git-send-email-dgdegra@tycho.nsa.gov> Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov> --- tools/flask/policy/policy/access_vectors | 32 +++++++++++++++--------------- tools/flask/policy/policy/security_classes | 2 +- 2 files changed, 17 insertions(+), 17 deletions(-) diff --git a/tools/flask/policy/policy/access_vectors b/tools/flask/policy/policy/access_vectors index 4fd61f1..8cca192 100644 --- a/tools/flask/policy/policy/access_vectors +++ b/tools/flask/policy/policy/access_vectors @@ -6,19 +6,19 @@ # Note: this is an example; the xenstore daemon provided with Xen does # not yet include XSM support, and the exact permissions may be defined # differently if such support is added. -class xenstore { - # read from keys owned by the target domain (if permissions allow) - read - # write to keys owned by the target domain (if permissions allow) - write - # change permissions of a key owned by the target domain - chmod - # change the owner of a key which was owned by the target domain - chown_from - # change the owner of a key to the target domain - chown_to - # access a key owned by the target domain without permission - override - # introduce a domain - introduce -} +#class xenstore { +# # read from keys owned by the target domain (if permissions allow) +# read +# # write to keys owned by the target domain (if permissions allow) +# write +# # change permissions of a key owned by the target domain +# chmod +# # change the owner of a key which was owned by the target domain +# chown_from +# # change the owner of a key to the target domain +# chown_to +# # access a key owned by the target domain without permission +# override +# # introduce a domain +# introduce +#} diff --git a/tools/flask/policy/policy/security_classes b/tools/flask/policy/policy/security_classes index 56595e8..069faea 100644 --- a/tools/flask/policy/policy/security_classes +++ b/tools/flask/policy/policy/security_classes @@ -5,4 +5,4 @@ # security policy. # # Access vectors for these classes must be defined in the access_vectors file. -class xenstore +#class xenstore -- 2.5.5 _______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org http://lists.xen.org/xen-devel
next prev parent reply other threads:[~2016-05-23 15:06 UTC|newest] Thread overview: 23+ messages / expand[flat|nested] mbox.gz Atom feed top 2016-05-23 15:05 [PATCH 0/5] flask/policy: Updates for Xen 4.8 Daniel De Graaf 2016-05-23 15:05 ` [PATCH 1/5] flask/policy: split into modules Daniel De Graaf 2016-06-07 19:22 ` Konrad Rzeszutek Wilk 2016-06-07 19:39 ` Daniel De Graaf 2016-06-07 19:57 ` Konrad Rzeszutek Wilk 2016-05-23 15:05 ` [PATCH 2/5] flask/policy: move user definitions and constraints " Daniel De Graaf 2016-06-07 19:37 ` Konrad Rzeszutek Wilk 2016-05-23 15:05 ` [PATCH 3/5] flask/policy: Remove unused support for binary modules Daniel De Graaf 2016-06-07 19:41 ` Konrad Rzeszutek Wilk 2016-05-23 15:05 ` [PATCH 4/5] flask/policy: xenstore stubdom policy Daniel De Graaf 2016-06-07 19:44 ` Konrad Rzeszutek Wilk 2016-06-07 19:48 ` Daniel De Graaf 2016-06-07 20:02 ` Konrad Rzeszutek Wilk 2016-07-06 15:34 ` default XSM policy for PCI passthrough for unlabeled resources anshul makkar 2016-07-06 15:59 ` Daniel De Graaf 2016-07-06 16:19 ` anshul makkar 2016-07-07 15:36 ` Daniel De Graaf 2016-07-07 16:29 ` anshul makkar 2016-05-23 15:05 ` Daniel De Graaf [this message] 2016-06-07 19:45 ` [PATCH 5/5] flask/policy: comment out unused xenstore example Konrad Rzeszutek Wilk 2016-06-07 19:51 ` Daniel De Graaf 2016-06-07 20:02 ` Konrad Rzeszutek Wilk 2016-06-07 20:04 ` Daniel De Graaf
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=1464015933-26891-6-git-send-email-dgdegra@tycho.nsa.gov \ --to=dgdegra@tycho.nsa.gov \ --cc=cardoe@cardoe.com \ --cc=steve@zentific.com \ --cc=xen-devel@lists.xenproject.org \ --subject='Re: [PATCH 5/5] flask/policy: comment out unused xenstore example' \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: link
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for NNTP newsgroup(s).