Commit Graph
52 Commits
Author SHA1 Message Date
Keir Fraser a9931381f9 Fix x86/64 build for *BSD.
- Config.mk: uname -m prints "amd64". Deal with this.
 - do not assume python is always in /usr/bin
 - get-fields.sh: make it portable and non-bash specific
Signed-off-by: Christoph Egger <Christoph.Egger@amd.com>
2007-10-19 14:49:08 +01:00
kfraser@localhost.localdomain 61c6564d34 Cleanups after XSM checkin.
Signed-off-by: Keir Fraser <keir@xensource.com>

--HG--
rename : xen/include/public/acm.h => xen/include/public/xsm/acm.h
rename : xen/include/public/acm_ops.h => xen/include/public/xsm/acm_ops.h
rename : xen/include/acm/acm_core.h => xen/include/xsm/acm/acm_core.h
rename : xen/include/acm/acm_endian.h => xen/include/xsm/acm/acm_endian.h
rename : xen/include/acm/acm_hooks.h => xen/include/xsm/acm/acm_hooks.h
2007-08-31 12:05:07 +01:00
kfraser@localhost.localdomain b1ed041464 Xen Security Modules: FLASK
Signed-off-by: George Coker <gscoker@alpha.ncsc.mil>
2007-08-31 11:31:18 +01:00
kfraser@localhost.localdomain d046f361dc Xen Security Modules: XSM
Signed-off-by: George Coker <gscoker@alpha.ncsc.mil>
2007-08-31 11:21:35 +01:00
kfraser@localhost.localdomain 6fcad535ee Tack -m32/-m64 on HOSTCFLAGS when COMPILE_ARCH is x86.
Should fix building in Solaris environments.
Signed-off-by: Keir Fraser <keir@xensource.com>
2007-08-16 16:00:17 +01:00
kfraser@localhost.localdomain 9de675c1b3 [Build] Remove ACM option for NULL and STE+CHWALL policy
Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
2007-07-13 13:42:41 +01:00
Keir Fraser 43aa5ed8c0 Specify -fno-strict-aliasing in root build config file.
Fixes correctness issues with xenstored and gcc-4.2.

Original patch by Charles Coffing <ccoffing@novell.com>

Signed-off-by: Keir Fraser <keir@xensource.com>
2007-07-07 10:31:15 +01:00
kfraser@localhost.localdomain 8c706ec28d acm: Changes to XML schema of the policy
This patch changes the XML schema of the ACM policy to require a
version and that every conflict set have a name. Every VM label must
have one Chinese Wall Type and every resource label one Simple Type
Enforcement Type. As a consequence of this some example policies
needed to be changed. Also not offering that many configuration
options for compiling xen anymore to make things simpler.

Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
2007-04-25 09:31:52 +01:00
kfraser@localhost.localdomain aacef84b33 In order to allow building as non-root with a non-default CC (which
root may not have access to through its $PATH), defer the generation
of an error until CC is actually needed.

Original patch by Jan Beulich <jbeulich@novell.com>

Signed-off-by: Keir Fraser <keir@xensource.com>
2007-03-27 14:50:17 +01:00
Keir Fraser cfcf0ae284 Xen and tools now require gcc 3.4+ on x86.
- gcc-3.2 cannot handle some multi-line assertions in the Xen
 sources. Noone noticed.
 - gcc-3.3 has problems with alignment constraints inside typedefs.

gcc 3.4.0 is now three years old so I hope that everyone has an
up-to-date compiler, or can obtain a more up-to-date package for their
distribution. If not we may need to fall back to supporting gcc-3.3.x
as well.

Also clean up the way we do version checks, using the power of awk.

Signed-off-by: Keir Fraser <keir@xensource.com>
2007-03-17 12:04:48 +00:00
kfraser@localhost.localdomain ca7a6b3eb2 Make Python tools (i.e., xend and pygrub) conditionally compiled.
Config option is PYTHON_TOOLS, default is 'y'.

Signed-off-by: Ben Thomas <ben@virtualiron.com>
2007-03-06 16:46:20 +00:00
kfraser@localhost.localdomain 48ad2e6f15 Build PAE by default on x86_32.
Signed-off-by: Keir Fraser <keir@xensource.com>
2007-01-18 18:39:07 +00:00
Emmanuel Ackaouy 8589463a25 Handle the creation of startup info for compatibility mode guests. This
includes a script to auto-generate checking or translation code between
native and compatibility mode hypercall argument structures.

Signed-off-by: Jan Beulich <jbeulich@novell.com>
2007-01-05 17:34:28 +00:00
Ewan Mellor 7169017f84 Make the xenfb tools an optional part of the build, as they introduce new
dependencies (libvncserver and libsdl devel packages).  Enable them with
XENFB_TOOLS=y.

Signed-off-by: Ewan Mellor <ewan@xensource.com>
2006-12-02 16:39:53 +00:00
jfehlig@jfehlig2.provo.novell.com 0dc1af83bf Add libxen to overall xen build via a config option in Config.mk.
Signed-off-by: Jim Fehlig <jfehlig@novell.com>
2006-11-22 14:25:07 -07:00
kfraser@localhost.localdomain f9038804d6 Replace test-gcc-flag with Linux-style cc-option.
Improve on Linux implementation by looking for any output
on stdout/stderr. This indicates badness.

Signed-off-by: Keir Fraser <keir@xensource.com>
2006-10-18 19:14:34 +01:00
kfraser@localhost.localdomain 3943db7763 [XEN] Can be built -std=gnu99 (except for .S files).
Need to be careful with static initialisers:
 1. *_LOCK_UNLOCKED, CPU_MASK_* no longer include a cast
 2. Dynamic uses of the above are replaced by
    appropriate function invocations.

Signed-off-by: Keir Fraser <keir@xensource.com>
2006-10-18 14:46:48 +01:00
kfraser@localhost.localdomain a3ef82b068 Avoid need for GREP variable by avoiding GNUisms. The
only one we appear to have is use of '-q'. Replace it
with redirection to /dev/null.

Also avoid use of 'tail' by replacing with 'head' or
'grep' as appropriate.

Signed-off-by: Keir Fraser <keir@xensource.com>
2006-10-18 13:43:35 +01:00
kfraser@localhost.localdomain c0fd920e98 [SOLARIS] Don't build ptrace code on Solaris.
Signed-off-by: Keir Fraser <keir@xensource.com>
2006-10-17 17:59:32 +01:00
kfraser@localhost.localdomain 7ffd47fbf6 [SOLARIS] Use GNU grep on Solaris.
Signed-off-by: John Levon <john.levon@sun.com>
2006-10-17 16:53:39 +01:00
kfraser@localhost.localdomain a278bc0ea1 Introduce Makefile config fragments for OS-specific differences.
Signed-off-by: John Levon <john.levon@sun.com>
2006-10-17 16:48:05 +01:00
kfraser@localhost.localdomain b11b29890d Don't use -Wunused-value. It's too aggressive with GCC4.
Signed-off-by: Keir Fraser <keir@xensource.com>
2006-10-17 15:53:42 +01:00
kfraser@localhost.localdomain 65bb7cea27 Build Xen with at least -O1 to avoid very large stack frames.
Signed-off-by: Keir Fraser <keir@xensource.com>
2006-07-27 12:59:36 +01:00
kaf24@firebug.cl.cam.ac.uk 70dfcaa268 [powerpc] add PowerPC support to Makefiles
Signed-off-by: Hollis Blanchard <hollisb@us.ibm.com>
2006-07-14 10:22:40 +01:00
kfraser@dhcp93.uk.xensource.com 3f2522e1ac Use a global build configuration file, and rework libxc Makefile for PPC.
Signed-off-by: Hollis Blanchard <hollisb@us.ibm.com>
2006-05-31 11:31:52 +01:00
kaf24@firebug.cl.cam.ac.uk 4886bb64c1 build: Make sure that DESTDIR is set
In the case where XEN_PYTHON_NATIVE_INSTALL is in effect,
if DESTDIR is not set then the install will go into a relative
directory rather than under the default prefix (usually /usr).

An alternate solution would be to update the fragments
that do the python install to use $(DESTDIR)/ instead of
$(DESTDIR). This is not an incredible burden as there
are only two such fragments in the tree. However, it
seems prone to error as new makefiles are created
in the future.

Signed-Off-By: Horms <horms@verge.net.au>
2006-04-10 16:31:53 +01:00
kaf24@firebug.cl.cam.ac.uk 945758df89 More build config changes:
- Build -O2 rather than -O3
 - Build with -Wstrict-prototypes
 - Move target-specific generic compiler switches to Config.mk

Signed-off-by: Keir Fraser <keir@xensource.com>
2006-03-10 17:32:04 +01:00
kaf24@firebug.cl.cam.ac.uk d27fbb0061 Move 'debug' build option into the outermost Config.mk file.
Signed-off-by: Keir Fraser <keir@xensource.com>
2006-03-09 22:31:45 +01:00
kaf24@firebug.cl.cam.ac.uk 326450f67e Clean up the usage of CFLAGS. This is nice for packagers, who would
like to control the base compilation flags from a central place.

Signed-off-by: Charles Coffing <ccoffing@novell.com>
2006-03-09 21:17:45 +01:00
emellor@leeni.uk.xensource.com 3f639e9079 HOSTCC should be used to set HOSTCFLAGS instead of CC.
There is a case where HOSTCC doesn't accept -Wdeclaration-after-statement,
while CC does. It results in a compilation error.
This patch fixes it

Signed-off-by: Isaku Yamahata <yamahata@valinux.co.jp>
2005-12-14 12:22:24 +00:00
kaf24@firebug.cl.cam.ac.uk 9d401b35f0 Add -Wdeclaration-after-statement to CFLAGS only if the
compiler supports it. Move test-gcc-flag function to
Config.mk where it can be used by any component of the
build.

Signed-off-by: Keir Fraser <keir@xensource.com>
2005-11-23 11:15:18 +01:00
kaf24@firebug.cl.cam.ac.uk 869e86d8e6 Add -Wdeclaration-after-statement to Xen and tools build.
Fix the compile errors that result from this.

Signed-off-by: Keir Fraser <keir@xensource.com>
2005-11-22 18:44:08 +01:00
kaf24@firebug.cl.cam.ac.uk ac5d4d868f Enable the Xen hypervisor ACM security policy to be determined at boot
time (instead of at compile time). Allows a single xen.gz binary to
run under different security policy types, which simplifies
distributions considerably. To this end, we replace the current single
compile switch in Config.mk with the following two:

1. ACM_SECURITY (y/n) if "n", then the ACM is not compiled and no security 
policies can be configured at boot time. If "y", then the ACM is compiled 
and can be configured into any of the available policy types (null, 
chwall, ste, chwall_ste) by specifying a valid boot policy .bin file in 
the grub boot configuration.

2. ACM_DEFAULT_SECURITY_POLICY (null / chwall / ste / chwall_ste) 
specifies the policy into which Xen defaults in the case that security is 
enabled but no boot policy file is specified, or the specified policy file 
is invalid (wrong version, magic, corrupted, ...)

While the type of the enabled policy (null, ste, ...) is decided once 
during boot for the whole boot cycle, the policy instantiation can be 
changed during operation as usual with the security tools.

Signed-off by: Tomas Lendacky <toml@us.ibm.com>
Signed-off by: Reiner Sailer <sailer@us.ibm.com>
2005-11-19 10:35:38 +01:00
kaf24@firebug.cl.cam.ac.uk d56d69a032 Clean up DESTDIR handling. Default install is to root
directory (/). This is only overridden automatically
for the 'make dist' targets and their legacy aliases
(make {xen,tools,kernels,docs}).

Signed-off-by: Keir Fraser <keir@xensource.com>
2005-10-05 15:05:38 +01:00
kaf24@firebug.cl.cam.ac.uk df150a9cb5 Move setting of configuration variables to Config.mk.
Allows for partial-tree builds to be invoked from a sub-directory.
Allow for users to include a ".config" with additional custom settings.

Signed-off-by: Michal Ostrowski <mostrows@watson.ibm.com>
2005-10-05 13:32:00 +01:00
kaf24@firebug.cl.cam.ac.uk 81667d0511 VTPM is off by default. 2005-09-01 09:01:15 +00:00
cl349@firebug.cl.cam.ac.uk 37fe3341c3 Merge libxenstat and xentop. 2005-08-22 21:54:28 +00:00
kaf24@firebug.cl.cam.ac.uk ed3a50d01c no pae by default 2005-08-22 19:59:58 +00:00
kaf24@firebug.cl.cam.ac.uk 7afc4b008b We cannot allow nested C functions. They create a stack
trampoline when their address is taken, which causes a
fault if the system implements NX/XD.

Signed-off-by: Keir Fraser <keir@xensource.com>
2005-08-22 19:58:22 +00:00
kaf24@firebug.cl.cam.ac.uk 39ec3e6c6a This patch:
* adds a C-based security policy translation tool to Xen (secpol_xml2bin) 
and removes the current Java 
security policy translator (Java dependencies).  The C-based tool 
integrates into the Xen source tree build 
and install (using gnome libxml2 for XML parsing). See install.txt.

* introduces security labels and related tools. Users can now use 
semantic-rich label names to put security-tags 
on domains. See example.txt, policy.txt.

* moves the security configuration (currently ACM_USE_SECURITY_POLICY) 
from xen/Rules.mk 
into a separate top-level Security.mk file  (it is needed by the 
tools/security and xen/acm).

Both xen/acm and tools/security are built during the Xen build process 
only if ACM_USE_SECURITY_POLICY 
is not ACM_NULL_POLICY (which is the default setting).

Signed-off-by Reiner Sailer <sailer@us.ibm.com>
Signed-off by Stefan Berger <stefanb@us.ibm.com>
Signed-off by Ray Valdez <rvaldez@us.ibm.com>
2005-08-19 09:03:17 +00:00
josht@us.ibm.com 3df6bc01b6 Rename vm-top to xentop. Make "xm top" invoke xentop. Make libxenstat a static library, and do not install it.
# HG changeset patch
# User josht@us.ibm.com
# Node ID ea025493dfe39540075ee9e4e75b2146f25bdbd3
# Parent  ce557cc4fdc764ac2ce07b8d4bcae77ecf847c29
Rename vm-top to xentop.  Make "xm top" invoke xentop.  Make libxenstat a static library, and do not install it.
2005-08-17 16:50:33 +00:00
josht@us.ibm.com 640c24310c Make vm-top and the xenstat perl and python bindings conditional based on configuration variables from Config.mk, rather than disabling them if the needed headers are not found. 2005-08-13 00:44:00 +00:00
kaf24@firebug.cl.cam.ac.uk 5175be9942 The attached patch adds -Werror to HOSTCFLAGS in Config.mk, makes
xen/tools actually use HOSTCFLAGS (it was already using HOSTCC), and
fixes some gcc-4.0 signedness warnings in xen/tools/symbols.c.

Signed-off-by: Josh Triplett <josht@us.ibm.com>
2005-08-08 08:32:52 +00:00
smh22@firebug.cl.cam.ac.uk a8498f221a Don't enable PAE by default just yet. 2005-08-03 06:46:53 +00:00
kaf24@firebug.cl.cam.ac.uk fadf487d95 Remove USB front/back from 2.4 build, totally. 2005-08-02 19:32:48 +00:00
kaf24@firebug.cl.cam.ac.uk 8833f0bb92 Force PAE build of Xen by specifying 'pae=y' to make, or
by setting XEN_TARGET_X86_PAE=y (e.g., in Config.mk).
Signed-off-by: Keir Fraser <keir@xensource.com>
2005-07-13 15:02:49 +00:00
iap10@spot.cl.cam.ac.uk 38539de55f bitkeeper revision 1.1718.2.1 (42b548b7ux2RLNcFOrtdJXuEMvLNEw)
This patch allows user to choose mirror to get linux kernel source instead of getting it from kernel.org (which set as default)
2005-06-19 10:28:07 +00:00
cl349@firebug.cl.cam.ac.uk dad197b071 bitkeeper revision 1.1513 (4291f527HzSV5MgVTL5ZpTs61-VQvg)
mk.linux-2.6-xenU, mk.linux-2.6-xen0, Rules.mk, Config.mk:
  Move {COMPILE,TARGET}_{,SUB}ARCH} definition into xen/Rules.mk.
Signed-off-by: Christian Limpach <Christian.Limpach@cl.cam.ac.uk>
2005-05-23 15:22:15 +00:00
katzj@redhat.com[iap10] 2cc5addc8f bitkeeper revision 1.1305 (42603ffeunTyoZX2egpGvfR_Km2tBw)
[PATCH] Install libraries into libdir

Attached makes it so that libxc and libxutil get installed
into /usr/lib64 instead of /usr/lib on x86_64.

Signed-off-by: Jeremy Katz <katzj@redhat.com>

===== Config.mk 1.3 vs edited =====
2005-04-15 22:28:14 +00:00
kaf24@firebug.cl.cam.ac.uk 4d446939a0 bitkeeper revision 1.1236.1.200 (424efe01yAPteHQ-fOPSaM_1yE9IfA)
Makefile fixes. mbootpack dependencies now work properly.
Signed-off-by: Keir Fraser <keir@xensource.com>
2005-04-02 20:18:09 +00:00