2 Commits

Include renames

Author	SHA1	Message	Date
Daniel De Graaf	a2c8399a91	flask/policy: split out rules for system_r ... When the all_system_role module is enabled, any domain type can be created using the system_r role, which was the default. When it is disabled, domains not using the default types (dom0_t and domU_t) must use another role such as vm_r. Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov> Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> Reviewed-by: Doug Goldstein <cardoe@cardoe.com>	2016-06-21 15:29:17 +01:00
Daniel De Graaf	31689dcb0f	flask/policy: split into modules ... This makes it easier to enable or disable parts of the XSM policy. Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov> Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> Reviewed-by: Doug Goldstein <cardoe@cardoe.com>	2016-06-21 15:29:17 +01:00