Files
xen/tools/security
kfraser@localhost.localdomain 7f6d8fe5c9 acm: Provide the possibility to choose the VM label of domain-0 in the
kernel line in grub.conf. The format is
ssidref=<ssidref>:sHype:<policy name>:<vm label>. The name of the
policy specified here must be the same name as the in the policy
provided as a module during boot, otherwise the policy will not be
accepted and the system then starts without a policy. The user tool
for 'xm dumppolicy' has been adapted to show which entry in the binary
policy is used by domain-0.

Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
2007-03-29 19:26:13 +01:00
..
2006-10-20 10:48:34 +01:00
2006-10-20 10:48:34 +01:00
2006-10-20 10:48:34 +01:00

##
# readme.txt <description to the sHype/Xen access control architecture>
#
# Author:
# Reiner Sailer 08/30/2006 <sailer@watson.ibm.com>
#
#
# This file is a toc for information regarding
# the access control policy and tools in Xen.
##

1. Xen User Guide

   describes how to configure, install, and deploy the sHype Access
   Control Module in Xen. See chapter "sHype/Xen Access Control".

2. 'xm' man page

   describes the commands related to Xen management, including the
   commands to manage security policies and labels. Read the access
   control subcommand section of the xm manual first.

3. policy.txt

   describes examples for access control policies in Xen. First read
   the policy description in the Xen User Guide.


4. policytools.txt

   describes the available tools for creating and managing security
   policies in Xen.