tools/flask/policy: Updates to policy and policy build infrastructure
authorKeir Fraser <keir.fraser@citrix.com>
Thu, 20 Aug 2009 20:15:24 +0000 (21:15 +0100)
committerKeir Fraser <keir.fraser@citrix.com>
Thu, 20 Aug 2009 20:15:24 +0000 (21:15 +0100)
commitce2fb297a8165963d47bc7eae5abbbf08399eef0
tree304a9c258361d6967787d5f2f42109b74d77ad3e
parent6d4af7fc297138f6af312170c900cb80f8659a26
tools/flask/policy: Updates to policy and policy build infrastructure

The original xen policy infrastructure was based off of an early
version of refpolicy. Because of this there was a lot of cruft that
does not apply to building a policy for xen. This patch does several
things. First it cleans up the makefile as to remove many unnecessary
build targets. Second it fixes an issue that the policy build process
wasn't handling interface files properly. Third it pulls in the MLS
suppport functions from current ref policy and makes use of
them. Finally it updates the xen policy with new rules to address
changes in xen since the policy was last worked on, and provides
several new abstractions for creating domains.

Signed-off-by: David P. Quigley <dpquigl@tycho.nsa.gov>
12 files changed:
tools/flask/policy/Makefile
tools/flask/policy/Rules.modular [deleted file]
tools/flask/policy/Rules.monolithic [deleted file]
tools/flask/policy/policy/mcs [deleted file]
tools/flask/policy/policy/mls
tools/flask/policy/policy/modules.conf
tools/flask/policy/policy/modules/xen/xen.if
tools/flask/policy/policy/modules/xen/xen.te
tools/flask/policy/policy/support/misc_macros.spt
tools/flask/policy/policy/support/mls_macros.spt [new file with mode: 0644]
tools/flask/policy/policy/systemuser [deleted file]
tools/flask/policy/policy/users