Re: [XEN PATCH v2] xen: allow XSM_FLASK_POLICY only if checkpolicy binary is available

2021-07-19 Thread George Dunlap
On 19 Jul 2021, at 12:04, Jan Beulich mailto:jbeul...@suse.com>> wrote: On 19.07.2021 12:47, Anthony PERARD wrote: On Mon, Jul 19, 2021 at 09:37:06AM +0200, Jan Beulich wrote: On 16.07.2021 14:38, Anthony PERARD wrote: +export HAS_CHECKPOLICY := $(call success,$(CHECKPOLICY) -h 2>&1 | grep -q x

Re: [XEN PATCH v2] xen: allow XSM_FLASK_POLICY only if checkpolicy binary is available

2021-07-19 Thread Jan Beulich
On 19.07.2021 12:47, Anthony PERARD wrote: > On Mon, Jul 19, 2021 at 09:37:06AM +0200, Jan Beulich wrote: >> On 16.07.2021 14:38, Anthony PERARD wrote: >>> +export HAS_CHECKPOLICY := $(call success,$(CHECKPOLICY) -h 2>&1 | grep -q >>> xen) >> >> While the setting indeed gets obtained in a Makefile

Re: [XEN PATCH v2] xen: allow XSM_FLASK_POLICY only if checkpolicy binary is available

2021-07-19 Thread Anthony PERARD
On Mon, Jul 19, 2021 at 09:37:06AM +0200, Jan Beulich wrote: > On 16.07.2021 14:38, Anthony PERARD wrote: > > +export HAS_CHECKPOLICY := $(call success,$(CHECKPOLICY) -h 2>&1 | grep -q > > xen) > > While the setting indeed gets obtained in a Makefile now, ... > > > --- a/xen/common/Kconfig > > +

Re: [XEN PATCH v2] xen: allow XSM_FLASK_POLICY only if checkpolicy binary is available

2021-07-19 Thread Jan Beulich
On 16.07.2021 14:38, Anthony PERARD wrote: > This will help prevent the CI loop from having build failures when > `checkpolicy` isn't available, when doing "randconfig" jobs. > > Also, move the check out of Config.mk and into xen/ build system. > Nothing in tools/ is using that information as it's

Re: [XEN PATCH v2] xen: allow XSM_FLASK_POLICY only if checkpolicy binary is available

2021-07-16 Thread Andrew Cooper
On 16/07/2021 13:38, Anthony PERARD wrote: > This will help prevent the CI loop from having build failures when > `checkpolicy` isn't available, when doing "randconfig" jobs. > > Also, move the check out of Config.mk and into xen/ build system. > Nothing in tools/ is using that information as it's

[XEN PATCH v2] xen: allow XSM_FLASK_POLICY only if checkpolicy binary is available

2021-07-16 Thread Anthony PERARD
This will help prevent the CI loop from having build failures when `checkpolicy` isn't available, when doing "randconfig" jobs. Also, move the check out of Config.mk and into xen/ build system. Nothing in tools/ is using that information as it's done by ./configure. Signed-off-by: Anthony PERARD