mirror of
https://github.com/xen-project/xen.git
synced 2026-10-29 10:40:03 +01:00
kfraser@localhost.localdomain
883ff61657
Add support for removing/replacing a policy from the running system. This operation is only successful if currently running VMs would also be allowed to run under the new policy. Removing the current policy means that the default policy is installed, which then only has support for a single VM label and STE type (SystemManagement) and is the same policy that the system starts up with when no policy is chosen. Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
## # readme.txt <description to the sHype/Xen access control architecture> # # Author: # Reiner Sailer 08/30/2006 <sailer@watson.ibm.com> # # # This file is a toc for information regarding # the access control policy and tools in Xen. ## 1. Xen User Guide describes how to configure, install, and deploy the sHype Access Control Module in Xen. See chapter "sHype/Xen Access Control". 2. 'xm' man page describes the commands related to Xen management, including the commands to manage security policies and labels. Read the access control subcommand section of the xm manual first. 3. policy.txt describes examples for access control policies in Xen. First read the policy description in the Xen User Guide. 4. policytools.txt describes the available tools for creating and managing security policies in Xen.