Re: [Xen-devel] [PATCH for-4.7] flask/policy: don't audit version queries

2016-05-04 Thread Konrad Rzeszutek Wilk
On Wed, May 04, 2016 at 02:44:56PM -0500, Doug Goldstein wrote: > On 5/4/16 12:20 PM, Daniel De Graaf wrote: > > Reported-by: Doug Goldstein > > Signed-off-by: Daniel De Graaf > > --- > > tools/flask/policy/policy/modules/xen/xen.te | 10 ++ > > 1 file changed, 10 insertions(+) > > > >

Re: [Xen-devel] [PATCH for-4.7] flask/policy: don't audit version queries

2016-05-04 Thread Doug Goldstein
On 5/4/16 12:20 PM, Daniel De Graaf wrote: > Reported-by: Doug Goldstein > Signed-off-by: Daniel De Graaf > --- > tools/flask/policy/policy/modules/xen/xen.te | 10 ++ > 1 file changed, 10 insertions(+) > > diff --git a/tools/flask/policy/policy/modules/xen/xen.te > b/tools/flask/polic

Re: [Xen-devel] [PATCH for-4.7] flask/policy: don't audit version queries

2016-05-04 Thread Konrad Rzeszutek Wilk
On Wed, May 04, 2016 at 01:20:46PM -0400, Daniel De Graaf wrote: > Reported-by: Doug Goldstein > Signed-off-by: Daniel De Graaf Wait, why don't we give Doug a chance to respond about the policy he is using. I am really not sure how we would deny permission to these using the default policy. Dou