We have now arranged for SECINITSID_DOMU to be defined (it corresponds
to system_u:system_r:domU_t in the default policy). Use it as the
default for the SSID of every domain.
Signed-off-by: Ian Campbell <ian.campb...@citrix.com>
Cc: Daniel De Graaf <dgde...@tycho.nsa.gov>
Cc: wei.l...@citrix.com
---
v2: Set ssidref rather than label. It is no longer necessary to
reorder things in libxl.c.
---
tools/libxl/libxl_create.c | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/tools/libxl/libxl_create.c b/tools/libxl/libxl_create.c
index f0da7dc..c9b2fec 100644
--- a/tools/libxl/libxl_create.c
+++ b/tools/libxl/libxl_create.c
@@ -25,6 +25,8 @@
#include <xen/hvm/hvm_info_table.h>
#include <xen/hvm/e820.h>
+#include <xen-xsm/flask/flask.h>
+
int libxl__domain_create_info_setdefault(libxl__gc *gc,
libxl_domain_create_info *c_info)
{
@@ -42,6 +44,9 @@ int libxl__domain_create_info_setdefault(libxl__gc *gc,
libxl_defbool_setdefault(&c_info->run_hotplug_scripts, true);
libxl_defbool_setdefault(&c_info->driver_domain, false);
+ if (!c_info->ssidref)
+ c_info->ssidref = SECINITSID_DOMU;
+
return 0;
}
--
1.7.10.4
_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
http://lists.xen.org/xen-devel
