Re: [RFC PATCH] flask: Remove magic SID setting

2022-07-09 Thread Daniel P. Smith
On 7/7/22 08:45, Jason Andryuk wrote: > On Thu, Jul 7, 2022 at 6:14 AM Daniel P. Smith > wrote: >> >> On 7/6/22 15:13, Jason Andryuk wrote: >>> flask_domain_alloc_security and flask_domain_create has special code to >>> magically label dom0 as dom0_t. This can all be streamlined by making >>> c

Re: [RFC PATCH] flask: Remove magic SID setting

2022-07-07 Thread Jason Andryuk
On Thu, Jul 7, 2022 at 6:14 AM Daniel P. Smith wrote: > > On 7/6/22 15:13, Jason Andryuk wrote: > > flask_domain_alloc_security and flask_domain_create has special code to > > magically label dom0 as dom0_t. This can all be streamlined by making > > create_dom0 set ssidref before creating dom0. >

Re: [RFC PATCH] flask: Remove magic SID setting

2022-07-07 Thread Daniel P. Smith
On 7/6/22 15:13, Jason Andryuk wrote: flask_domain_alloc_security and flask_domain_create has special code to magically label dom0 as dom0_t. This can all be streamlined by making create_dom0 set ssidref before creating dom0. Hmm, I wouldn't call it magical, it is the initialization policy for

[RFC PATCH] flask: Remove magic SID setting

2022-07-06 Thread Jason Andryuk
flask_domain_alloc_security and flask_domain_create has special code to magically label dom0 as dom0_t. This can all be streamlined by making create_dom0 set ssidref before creating dom0. create_domU is also extended to create domains with domU_t. xsm_ssidref_domU and xsm_ssidref_dom0 are introd