In order to support assigning security lables to ARM device tree nodes in Xen's XSM policy, a new ocontext type is needed in the security policy.
This addition requires a new policy version for Xen. In order to keep the build process for Xen policy sane, a method of determining the highest Xen policy version (which is independent of the SELinux policy version) supported by checkpolicy. In addition to adding the new ocontext, the existing I/O memory range ocontext is expanded to 64 bits in order to support hardware with more than 44 bits of physical address space (32-bit count of 4K pages). [PATCH 1/4] Expand Xen IOMEMCON to 64 bits [PATCH 2/4] Add device tree ocontext nodes to Xen policy [PATCH 3/4] checkpolicy: add output for Xen policy version support [PATCH 4/4] checkpolicy: Expand allowed character set in paths _______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org http://lists.xen.org/xen-devel
