On Fri, Jul 16, 2021 at 04:26:39PM +0100, George Dunlap wrote: > What this patch does is to make it so that if someone explicitly sets > CONFIG_XSM_FLASK_POLICY=y, but doesn’t have checkpolicy, the build system > will silently disable the policy behind their backs without telling them?
FYI, silenty disabling unavailable config options is actually documented, in "INSTALL", section "Xen Hypervisor". ;-) Well kind of. -- Anthony PERARD