4 Commits

Include renames

Author	SHA1	Message	Date
Daniel De Graaf	2511f89d9a	flask/policy: xenstore stubdom policy ... This adds the xenstore_t type to the example policy for use by a xenstore stub domain; see the init-xenstore-domain tool for how this type needs to be used. Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov> Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> Reviewed-by: Doug Goldstein <cardoe@cardoe.com>	2016-06-21 15:29:17 +01:00
Daniel De Graaf	d72fd26d5f	flask/policy: move user definitions and constraints into modules ... This also renames the example users created by vm_role. Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov> Reviewed-by: Doug Goldstein <cardoe@cardoe.com>	2016-06-21 15:29:17 +01:00
Daniel De Graaf	a2c8399a91	flask/policy: split out rules for system_r ... When the all_system_role module is enabled, any domain type can be created using the system_r role, which was the default. When it is disabled, domains not using the default types (dom0_t and domU_t) must use another role such as vm_r. Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov> Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> Reviewed-by: Doug Goldstein <cardoe@cardoe.com>	2016-06-21 15:29:17 +01:00
Daniel De Graaf	31689dcb0f	flask/policy: split into modules ... This makes it easier to enable or disable parts of the XSM policy. Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov> Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> Reviewed-by: Doug Goldstein <cardoe@cardoe.com>	2016-06-21 15:29:17 +01:00