From mboxrd@z Thu Jan  1 00:00:00 1970
From: Doug Goldstein <cardoe@cardoe.com>
Subject: Re: [PATCH 13/17] xen: move FLASK entry under XSM in
 Kconfig
Date: Mon, 20 Jun 2016 09:41:05 -0500
Message-ID: <e4619dc0-99e6-8866-4856-e2fe9d1acaac@cardoe.com>
References: <1466431466-28055-1-git-send-email-dgdegra@tycho.nsa.gov>
 <1466431466-28055-14-git-send-email-dgdegra@tycho.nsa.gov>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3887553788112122157=="
Return-path: <xen-devel-bounces@lists.xen.org>
In-Reply-To: <1466431466-28055-14-git-send-email-dgdegra@tycho.nsa.gov>
List-Unsubscribe: <http://lists.xen.org/cgi-bin/mailman/options/xen-devel>,
 <mailto:xen-devel-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-devel@lists.xen.org>
List-Help: <mailto:xen-devel-request@lists.xen.org?subject=help>
List-Subscribe: <http://lists.xen.org/cgi-bin/mailman/listinfo/xen-devel>,
 <mailto:xen-devel-request@lists.xen.org?subject=subscribe>
Errors-To: xen-devel-bounces@lists.xen.org
Sender: "Xen-devel" <xen-devel-bounces@lists.xen.org>
To: Daniel De Graaf <dgdegra@tycho.nsa.gov>, xen-devel@lists.xen.org
List-Id: xen-devel@lists.xenproject.org

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============3887553788112122157==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="b7iWwIMjPJl6kNd6TM55Dsa4d9djm5nrU"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--b7iWwIMjPJl6kNd6TM55Dsa4d9djm5nrU
Content-Type: multipart/mixed; boundary="jr7kbLWO1Icjni0wQAmJlxFfXoL9cUkvx"
From: Doug Goldstein <cardoe@cardoe.com>
To: Daniel De Graaf <dgdegra@tycho.nsa.gov>, xen-devel@lists.xen.org
Message-ID: <e4619dc0-99e6-8866-4856-e2fe9d1acaac@cardoe.com>
Subject: Re: [Xen-devel] [PATCH 13/17] xen: move FLASK entry under XSM in
 Kconfig
References: <1466431466-28055-1-git-send-email-dgdegra@tycho.nsa.gov>
 <1466431466-28055-14-git-send-email-dgdegra@tycho.nsa.gov>
In-Reply-To: <1466431466-28055-14-git-send-email-dgdegra@tycho.nsa.gov>

--jr7kbLWO1Icjni0wQAmJlxFfXoL9cUkvx
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

On 6/20/16 9:04 AM, Daniel De Graaf wrote:
> Since enabling XSM is required to enable FLASK, place the option for
> FLASK below the one for XSM.  In addition, since it does not make sense=

> to enable XSM without any XSM providers, and FLASK is the only XSM
> provider, hide the option to disable FLASK under EXPERT.
>=20
> Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
> ---
>  xen/common/Kconfig | 37 +++++++++++++++++++------------------
>  1 file changed, 19 insertions(+), 18 deletions(-)
>=20
> diff --git a/xen/common/Kconfig b/xen/common/Kconfig
> index cd59574..6a51fd5 100644
> --- a/xen/common/Kconfig
> +++ b/xen/common/Kconfig
> @@ -11,24 +11,6 @@ config COMPAT
>  config CORE_PARKING
>  	bool
> =20
> -config FLASK
> -	bool "FLux Advanced Security Kernel support"
> -	default y
> -	depends on XSM
> -	---help---
> -	  Enables the FLASK (FLux Advanced Security Kernel) support which
> -	  provides a mandatory access control framework by which security
> -	  enforcement, isolation, and auditing can be achieved with fine
> -	  granular control via a security policy.
> -
> -	  If unsure, say N.
> -

<snip>

> =20
> +config FLASK
> +	def_bool y
> +	bool "FLux Advanced Security Kernel support" if EXPERT =3D "y"

Why did FLASK become dependent on EXPERT? It wasn't previously.

--=20
Doug Goldstein


--jr7kbLWO1Icjni0wQAmJlxFfXoL9cUkvx--

--b7iWwIMjPJl6kNd6TM55Dsa4d9djm5nrU
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0
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=stXO
-----END PGP SIGNATURE-----

--b7iWwIMjPJl6kNd6TM55Dsa4d9djm5nrU--


--===============3887553788112122157==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWRldmVs
IG1haWxpbmcgbGlzdApYZW4tZGV2ZWxAbGlzdHMueGVuLm9yZwpodHRwOi8vbGlzdHMueGVuLm9y
Zy94ZW4tZGV2ZWwK

--===============3887553788112122157==--