Re: [Xen-devel] [PATCH for-4.8] flask: build policy in different locations

2016-11-04 Thread Wei Liu
On Thu, Nov 03, 2016 at 03:22:19PM +, Wei Liu wrote: > On Thu, Nov 03, 2016 at 11:17:59AM -0400, Daniel De Graaf wrote: > > On 10/28/2016 11:17 AM, Wei Liu wrote: > > >The flask policy can be build twice -- one for hypervisor and one for > > >tools. > > > > > >Before this patch, everything is b

Re: [Xen-devel] [PATCH for-4.8] flask: build policy in different locations

2016-11-03 Thread Wei Liu
On Thu, Nov 03, 2016 at 11:17:59AM -0400, Daniel De Graaf wrote: > On 10/28/2016 11:17 AM, Wei Liu wrote: > >The flask policy can be build twice -- one for hypervisor and one for > >tools. > > > >Before this patch, everything is built inside tools/flask/policy > >directory. It is possible to have

Re: [Xen-devel] [PATCH for-4.8] flask: build policy in different locations

2016-11-03 Thread Daniel De Graaf
On 10/28/2016 11:17 AM, Wei Liu wrote: The flask policy can be build twice -- one for hypervisor and one for tools. Before this patch, everything is built inside tools/flask/policy directory. It is possible to have a race to write to the same output file when running parallel builds. Prepend o

Re: [Xen-devel] [PATCH for-4.8] flask: build policy in different locations

2016-11-02 Thread Wei Liu
On Fri, Oct 28, 2016 at 04:17:17PM +0100, Wei Liu wrote: > The flask policy can be build twice -- one for hypervisor and one for > tools. > > Before this patch, everything is built inside tools/flask/policy > directory. It is possible to have a race to write to the same output > file when running

Re: [Xen-devel] [PATCH for-4.8] flask: build policy in different locations

2016-10-28 Thread Wei Liu
On Fri, Oct 28, 2016 at 09:32:19AM -0600, Jan Beulich wrote: > >>> On 28.10.16 at 17:17, wrote: > > --- a/.gitignore > > +++ b/.gitignore > > @@ -285,6 +285,8 @@ xen/xsm/flask/include/av_permissions.h > > xen/xsm/flask/include/class_to_string.h > > xen/xsm/flask/include/flask.h > > xen/xsm/flas

Re: [Xen-devel] [PATCH for-4.8] flask: build policy in different locations

2016-10-28 Thread Jan Beulich
>>> On 28.10.16 at 17:17, wrote: > --- a/.gitignore > +++ b/.gitignore > @@ -285,6 +285,8 @@ xen/xsm/flask/include/av_permissions.h > xen/xsm/flask/include/class_to_string.h > xen/xsm/flask/include/flask.h > xen/xsm/flask/include/initial_sid_to_string.h > +xen/xsm/flask/policy.* > +xen/xsm/flas