similar to: XSM in Xenserver.

Hi all, i want to know about the following things: 1.unloading XSM policy. -xl loadpolicy xenpolicy.24 to load the policy. For unloading is there any command is available.? 2. i want to know any analysis tool is available for XSM policy. 3. Apart from wiki.org/XSM any other tutorial is available for developing own XSM policy.? Thanks and regards, cooldharma06.

hi, i am using libvirt-1.2.0 which is installed from source. Which i am using to launch instance on xen. its working fine when i am launching vm from the root user. But i am entered as another user means its throwing the error. And libvirt is working fine in that user except the creating vm: Please refer the following things: eucalyptus@cooldharma06:/opt/i-47FD0798$ virsh -c xen:/// WARNING:

i installed both xen-4.2.1 and libvirt-1.2.0 from the source only. i moved with the latest version of libvrirt. i did the gdb in libvirt-1.2.0 and i raised the bug. Please find the following link for the bug report: https://bugzilla.redhat.com/show_bug.cgi?id=1044838 regards, cooldharma06. On Wed, Dec 18, 2013 at 6:33 PM, Michal Privoznik <mprivozn@redhat.com>wrote: > On 18.12.2013

While compiling XEN with XSM_ENABLE=y and FLASK_ENABLE=y, I received the following error. gcc -O1 -fno-omit-frame-pointer -m64 -g -fno-strict-aliasing -std=gnu99 -Wall -Wstrict-prototypes -Wno-unused-value -Wdeclaration-after-statement -Wno-unused-but-set-variable -fno-builtin -fno-common -Wredundant-decls -iwithprefix include -Werror -Wno-pointer-arith -pipe

i am using libvirt-1.1.4 with xen(libxl). When destroying the VM its showing the following error : virsh # destroy 4 error: Failed to destroy domain 4 error: End of file while reading data: Input/output error error: One or more references were leaked after disconnect from the hypervisor error: Failed to reconnect to the hypervisor virsh # list error: failed to connect to the hypervisor error: no

hi all, i am new to the libvirt. Via libvirt i am converting my xen.com.sfg. In xen i added xsm label as, seclabel:system_u:domU_t. but after creating vm using xen or by convertdom-to-xml also does not contain any label or text with xen-4.2.1. in the documentation also you mentioned selinux label (sVirt) only. Can u clear me the following things: 1. How to use XSM label in libvirt.? 2. What

Fix formatting of Flask AVC audit messages so that existing policy tools can parse them. After applying, ''xm dmesg | audit2allow'' yields the expected result. Signed-off-by: Stephen D. Smalley <sds@tycho.nsa.gov> Signed-off-by: George S. Coker, II <gscoker@alpha.ncsc.mil> --- xen/xsm/flask/avc.c | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-)

________________________________ From: Prasad [prasad@mukhedkar.com] Sent: Tuesday, May 28, 2013 7:33 PM To: Parakkal, Navin S Subject: Re: [libvirt-users] libvirt for Citrix XenServer On 05/27/2013 12:13 PM, Parakkal, Navin S wrote: Hi, Can someone send me the build steps how to build for Citrix XenServer ? I want to build a version of libvirt for Citrix XenServer. Regards, Navin

Hello all, I am trying to get a xenstore/oxenstore (oxenstore is mirage based) stubdom to get to work on Xen 4.2.1. I know that I need to set XSM/FLASK rules and so I have compiled 4.2.1 with XSM and FLASK. I already talked with Daniel de Graaf (on the mailinglists) and Steven Maresca on IRC about this thing. Daniel already wrote a XSM/FLASK ruleset in this thread:

- The patch does away with the autogenerated xsm.py file and introduces a config parameter in xend-config.sxp to determine the security module. The parameter is (xsm_module_name {acm, dummy, flask}). The default setting/option is dummy. .hgignore is also updated to stop ignoring xsm.py on commits. - The patch has created an xsconstant for XS_POLICY_FLASK and updated the toolchain to check the

The FLASK security checks for resource ranges were not implemented correctly - only the permissions on the endpoints of a range were checked, instead of all items contained in the range. This would allow certain resources (I/O ports, I/O memory) to be used by domains in contravention to security policy. This also corrects a bug where adding overlapping resource ranges did not trigger an error.

Hello everyone, My organization has an iSCSI LUN on a XenServer 6.0.2 host that is having issues. Last night we attempted a snapshot on a VM that is critical to our infrastructure. During the snapshot, the task locked up and was unable to progress or stop the snapshot. I attempted to force the VM to stop as well as destroy it''s domain. As a last resort I had powercycled the host. Upon

Guys! I have one fiber channel IBM storage (10T) and 8 HP Proliant servers with 32G of RAM on each and 1 HP with 4G of RAM. My question is: * How to use the same storage (block device) with all my different virtualization servers simultaneously? I have 2 open source Xen with CentOS 5.4, 2 VMWare ESX, 2 Citrix XenServer, 2 KVM powered by Ubuntu and 1 Debian exporting the IBM storage to a SAN

hi, i removed all libvirt things form my system and i installed libvirt-0.9.12 frm my repository. then i installed libvirt-1.1.2 from the source with following commands. ./configure --prefix=/usr --localstatedir=/var --sysconfdir=/etc --with-xen=yes --with-libxl=yes make make install now its works with XM. but with xl its not working... i attached the corresponding screenshots also. kindly

What are the advantages to Citrix''s XenServer vs. an open source solution using some Linux distro that includes a recent hypervisor? I''m interested from the standpoint of embedded systems development, not as a generic VM platform, which is why I''m asking on xen-devel and not xen-users. Jason _______________________________________________ Xen-devel mailing list

Hi. I have problem with installation XCP and XenServer on DomU. Installation just stuck after a while from installation beginning. DomU just stop responding, even reconnect with vncviewer isn''t possible. I''m using iso images to install. Dom0 is kernel 3.6-rc7 with xen 4.2.1-pre. I''m having such log: -videoram option does not work with cirrus vga device model. Videoram

Hi all, Using XenServer with a RHEL6 beta VM, I have sar installed on the hypervisor and VM. If I do a ''md5sum < /dev/urandom'' to spike CPU usage on the VM, I see the indication on the XenCenter performance graph on CPU 0. It does increase quickly. Neither sar output gives any sort of indication that the CPU is being loaded. This VM is pinned to both processor 0 and 1

hi, i prepared my xen-4.2.1 document with this mail. kindly refer the below attachment. i installed libvirt 1.1.1 like this it giving the following error: ./autogen.sh --system --with-xen=yes make /daemon/libvirtd -d then i checked with the virsh ->version virsh # version error: failed to connect to the hypervisor error: no valid connection error: Failed to connect socket to

Adds support for assigning a label to domains, obtaining and setting the current enforcing mode, and loading a policy with xl command when the Flask XSM is in use. libxl.c | 1 libxl.idl | 3 - xl.h | 3 + xl_cmdimpl.c | 171 +++++++++++++++++++++++++++++++++++++++++++++++++++++++--- xl_cmdtable.c | 18 +++++- 5 files changed, 187 insertions(+), 9