On Mon, 2015-12-14 at 18:58 +0000, Ian Jackson wrote:
> Ian Campbell writes ("[PATCH OSSTEST] Debian: Support runvar to set flask
> mode"):
> > Currently it is hardcoding to enforcing but it might be useful to
> > run with e.g. permissive or even disabled (aka dummy mode)
> ...
> > --- a/overlay/etc/grub.d/20_linux_xen
> > +++ b/overlay/etc/grub.d/20_linux_xen
> > @@ -93,7 +93,9 @@ linux_entry ()
> > if test ! -e "${xen_dirname}/${xenpolicy}" ; then
> > return
> > fi
> > - xen_args=`echo $xen_args flask=enforcing`
> > + if test -n "${GRUB_XEN_FLASK_MODE}" ; then
> > + xen_args=`echo $xen_args flask=${GRUB_XEN_FLASK_MODE}`
> > + fi
>
> I thought we were hoping to eventually do away with our copy of this
> file. Has this change gone upstream ?
Sadly there has not been a peep from the maintainers on http://savannah.gnu
.org/bugs/?43420
Perhaps we should also send the patch to the upstream ML?
Ian.
_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
http://lists.xen.org/xen-devel
