Daniel De Graaf b5f90278f5 flask: create unified "flask=" boot parameter ...

This unifies the flask_enforcing and flask_enabled boot parameters into
a single parameter with additional states.  Defined options are:

 enforcing - require policy to be loaded at boot time and enforce it
 permissive - a missing or broken policy does not panic
 disabled - revert to dummy (no XSM) policy.  Was flask_enabled=0
 late - bootloader policy is not used; later loadpolicy is enforcing

The default mode remains "permissive" and the flask_enforcing boot
parameter is retained for compatibility.  If flask_enforcing=1 is
specified and flask= is not, the bootloader policy will be loaded in
enforcing mode if present, but errors will disable access controls until
a successful loadpolicy instead of causing a panic at boot.

Suggested-by: Julien Grall <julien.grall@linaro.org>
Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>

2015-03-10 13:50:24 +01:00

..

arm

xen/arm: Add early printk support for ThunderX platform

2015-03-05 16:40:59 +00:00

amd-ucode-container.txt

docs, amd_ucode: condense amd_ucode notes

2014-10-16 10:07:56 +02:00

channel.txt

libxl: add support for 'channels'

2014-10-20 13:51:28 +01:00

console.txt

libxl: add support for 'channels'

2014-10-20 13:51:28 +01:00

coverage.markdown

gcov: update documentation on coverage.

2013-05-30 09:31:05 +01:00

crashdb.txt

Fix gdb debugging of hypervisor.

2007-12-12 11:27:15 +00:00

distro_mapping.txt

Add configure --with-sysconfig-leaf-dir=SUBDIR to set CONFIG_LEAF_DIR

2014-10-06 17:00:22 +01:00

dump-core-format.txt

dump-core: update the documentation

2009-01-15 12:40:48 +00:00

efi.markdown

EFI: ignore EFI commandline, skip console setup when booted from GRUB

2014-11-04 13:13:26 +01:00

grant-tables.txt

bitkeeper revision 1.1344 (4266a1eeiNiXbU4vcENZiEEaX7Iybw)

2005-04-20 18:39:42 +00:00

hvm-emulated-unplug.markdown

Register PV driver product numbers 4 and 5.

2013-11-04 17:04:07 +00:00

kexec_and_kdump.txt

docs: remove ia64 from kexec_and_kdump.txt

2014-03-12 13:34:40 +00:00

libxl_memory.txt

docs: initial documentation for xenstore paths

2012-10-01 17:54:11 +01:00

pci-device-reservations.txt

docs: Add some words describing xen-pvdevice

2013-11-29 10:29:05 +00:00

printk-formats.txt

vsprintf: introduce %*ph extended format specifier for hex buffers

2014-10-01 11:32:56 +02:00

pvh-readme.txt

dom0: add opt_dom0pvh to setup.c

2014-06-02 10:32:22 +02:00

pvh.markdown

docs: fix one typo in pvh.markdown

2014-09-29 13:25:15 +01:00

pvrdtscp.c

docs: Example usage of pvrdtscp algorithm

2009-12-11 08:51:21 +00:00

qemu-upstream_howto_use_it.markdown

docs: fix link in qemu-upstream doc

2012-07-24 10:29:17 +01:00

sedf_scheduler_mini-HOWTO.txt

docs: remove non-breaking spaces from sedf_scheduler_mini-HOWTO.txt

2011-11-29 15:18:18 +00:00

tmem-internals.html

docs: remove ia64 from tmem-internals.html

2014-03-12 13:37:20 +00:00

tscmode.txt

docs: various typos

2012-06-28 16:57:26 +01:00

vbd-interface.txt

libxl: introduce an option for disabling the non-O_DIRECT workaround

2014-05-02 17:50:27 +01:00

vtd.txt

Replace references to old wiki with ones to new.

2011-11-29 13:53:31 +00:00

vtpm-platforms.txt

vtpmmgr: use XSM label as vTPM kernel hash

2014-04-23 11:58:26 +01:00

vtpm.txt

vtpmmgr: add TPM group support

2014-04-23 11:56:41 +01:00

vtpmmgr.txt

vTPM/TPM2: Record some infomation in docs/misc/vtpmmgr.txt about

2015-01-28 12:54:50 +00:00

x86-xenpv-bootloader.markdown

docs: Introduce specification for x86 pv bootloader chainloading paths/formats.

2014-10-21 08:59:56 +01:00

xen_config.html

tools: vnet: Remove

2011-03-25 21:59:20 +00:00

xen-command-line.markdown

flask: create unified "flask=" boot parameter

2015-03-10 13:50:24 +01:00

xen-error-handling.txt

docs: Add description of BUILD_BUG_ON().

2008-12-04 16:36:43 +00:00

xenpaging.txt

docs: update xenpaging.txt

2012-08-30 17:57:31 +01:00

xenstore-paths.markdown

libxl/remus: setup and control network output buffering

2014-09-26 15:12:37 +01:00

xenstore-ring.txt

xenstore: extend the xenstore ring with a 'closing' signal

2014-10-08 14:29:08 +01:00

xenstore.txt

docs: various typos

2012-06-28 16:57:26 +01:00

xl-disk-configuration.txt

libxl: add option for discard support to xl disk configuration

2014-05-19 12:50:27 +01:00

xl-network-configuration.markdown

libxl: Allow network driver domains when run_hotplug_scritps is set

2013-07-17 12:18:25 +01:00

xl-numa-placement.markdown

libxl: automatic NUMA placement affects soft affinity

2014-07-30 12:45:25 +01:00

xsm-flask.txt

flask: create unified "flask=" boot parameter

2015-03-10 13:50:24 +01:00