acm: Provide the possibility to choose the VM label of domain-0 in the
authorkfraser@localhost.localdomain <kfraser@localhost.localdomain>
Thu, 29 Mar 2007 18:26:13 +0000 (19:26 +0100)
committerkfraser@localhost.localdomain <kfraser@localhost.localdomain>
Thu, 29 Mar 2007 18:26:13 +0000 (19:26 +0100)
commit7f6d8fe5c9edca501420059a857116e42cd409ee
tree675e369c9728c656bb291c3c7dbeed3504cd2e09
parent61e7893dafdfa84717d362986c8328effd1a2320
acm: Provide the possibility to choose the VM label of domain-0 in the
kernel line in grub.conf. The format is
ssidref=<ssidref>:sHype:<policy name>:<vm label>. The name of the
policy specified here must be the same name as the in the policy
provided as a module during boot, otherwise the policy will not be
accepted and the system then starts without a policy. The user tool
for 'xm dumppolicy' has been adapted to show which entry in the binary
policy is used by domain-0.

Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
tools/security/secpol_tool.c
tools/security/secpol_xml2bin.c
xen/acm/acm_chinesewall_hooks.c
xen/acm/acm_core.c
xen/acm/acm_null_hooks.c
xen/acm/acm_policy.c
xen/acm/acm_simple_type_enforcement_hooks.c
xen/include/acm/acm_core.h
xen/include/acm/acm_hooks.h