similar to: [PATCH][ACM][UPDATE2] python tools and support for resource labeling

Updates xensec_ezpolicy ACM policy generation tool so that it works with wxPython under Python 2.5 as well. Thanks Reiner Signed-off by: Reiner Sailer <sailer@us.ibm.com> _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel

This patch: * adds a C-based security policy translation tool to Xen (secpol_xml2bin) and removes the current Java security policy translator (Java dependencies). The C-based tool integrates into the Xen source tree build and install (using gnome libxml2 for XML parsing). See install.txt. * introduces security labels and related tools. Users can now use semantic-rich label names to put

This patch fixes an indentation error in main.py. The effect of this bug is that block-attach does not check labels if the ACM is active. This bug slipped in with change set 11572_:_ ad22c711ccb7 <http://xenbits.xensource.com/xen-unstable.hg?cs=ad22c711ccb7>. This patch is essential and should get into 3.0.3. I tested the patch with security off and on. Thanks Reiner P.S. We are

This patch fixes return codes for the acm-related Xen management scripts (error conditions) and addresses minor issues that ''pycheck'' complains about. It is tested with xm-test and by manually running the xm commands. It also handles the return case (reported by Masaki Kanno) that was missed in the originally patch. Signed-off by: Reiner Sailer <sailer@us.ibm.com>

This patch adds a policy name to the policy definition. This policy name must be unique and must change if the content of the file changes. The policy name is used to ensure that the XM tools and the hypervisor work on the same policy, i.e., interpret the security information on domains consistently. This patch also simplifies the policy management by moving policy and labels into a single

This patch adds an ACM hook into the network scripts (/etc/xen/scripts). It adds iptables rules that enforce mandatory access control on network packets exchanged between virtual interfaces. If ACM is active, this patch sets the default FORWARD policy in Dom0 to DROP and adds iptables ACCEPT rules between vifs that belong to domains that are permitted to share (determined by using the

Hi, as a follow-up to the posting of the sHype patches for Xen from Tue/We this week [http://lists.xensource.com/archives/html/xen-devel/2005-03/msg01371.html], you''ll find attached the promised draft Readme for the courageous ones to get a little exposure to sHype at a small example. I am posting this right before being away-from-email until April 11th. Please be patient when

> From: David Hopwood <david@bl...> > [image removed] Re: trusted computing > 2004-10-18 19:24 > Tim Freeman wrote: > > > not about Xen in particular, but as a side note, because I think some > > people are interested in trusted computing and virtualization? If > > you"re not, sorry for the intrusion! > > > >

This patch enables the labeling of (disk-type) resources with the special label __INACCESSIBLE__ to prevent unlabeled domains from accessing them. Signed-off-by: Stefan Berger <stefanb@us.ibm.com> _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel

The CentOS 3.1 update2 packages have now been released. They are available on mirror.centos.org and should be on all mirrors within a few hours. To update just run 'yum update' Please bugzilla any problems. There was a problem with the pam build in testing not being linked against the laus library, so the released version is a .c0 so that anyone who has installed the testing version

Unless anyone shouts I intend to push all the update2/testing stuff into updates for 3.1 later on today - say about 22:00 UTC All the security related updates have already been released. I am not convinced that lack of feedback means that there are no problems, more likely it means that not many people have tested the stuff, but I have had no serious problems and cant do any more testing.

Please, How to certify me that I am installing the CentOS equivalent to RHEL 3 update1 or update2? Thanks, Zamil Machado Cavalcanti Bahia - BRAZIL Linux Counter #56812 http://counter.li.org

Ok, I have resolved my problem with this error by recreating my Kerberos keytab file : net ads keytab create -k Hope this could help some others people. Regards Philippe RITTER -----Message d'origine----- De : RITTER, Philippe Envoyé : lundi 18 avril 2016 11:38 À : 'Rowland penny'; 'sambalist' Objet : RE: [Samba] Domain member seems to work, wbinfo -u not (update2) Hello

On 18/04/16 08:06, Oktay Akbal wrote: > >>> Rowland >>> >> OK, it is now later :-) >> >> My DCs are now running a self-compiled Samba 4.4.2, I set up a domain >> member in a VM running 4.4.2, again self compiled. My laptop runs Wheezy >> and Samba Version 4.2.11-SerNet-Debian-9.wheezy. >> >> Every thing works, wbinfo -u, wbinfo -g,

Anybody still has MSVC 2015 update 1? It seems that MSVC 2015U2 miscompiles stream_encoder_intrin_sse2.c, stream_encoder_intrin_ssse3.c (and probably stream_encoder_intrin_avx2.c, but currently I cannot test it 'cause I don't have avx2 CPU). I wonder what happened and what changed in the asm code that MSVC generates.

New update.   I now have done about 6 machines. 2 with samba 4.2.10 work fine, 2 not. 1 with samba 4.3.7 works fine, 1 not.   I saw Jelmer updated the samba to 4.3.8 in sid, so i recompiled these to jessie. I upgraded the 4.3.7 to 4.3.8 Same result. Wbinfo -g works, -u not. For both servers.   I notice one strange thing here. I have 2 servers, both samba 4.2.10, all stock debian

Hi all, Could you teach me about the behavior of xm commands when ''ACMError'' occurred? I am testing the behavior of xm commands with wrong arguments. When I tested xm commands related to security (xm *label/*policy), I found that some of them. - return 0, - show ACMError''s Traceback messages. Are these results specifications or bugs? Example: # xm cfgbootpolicy

> -----Original Message----- > From: Ewan Mellor [mailto:ewan@xensource.com] > Sent: Tuesday, December 06, 2005 5:25 AM > To: Dave Thompson (davetho) > Cc: Xen Mailing List > Subject: Re: [Xen-devel] Hotplug scripts not working... > xen/ia64 domU stoppedworking > > On Mon, Dec 05, 2005 at 03:03:54PM -0500, Dave Thompson > (davetho) wrote: > > > >

I was just looking for an easy way to convert between COM datetime and chron datetime (both ways.) I found examples on the list, but they involved origin. Does anyone have functions for converting COM datetime <-> chron datetimethat work "safely"? David L. Reiner > -----Original Message----- > From: Gabor Grothendieck [mailto:ggrothendieck@gmail.com] >

On 16/04/16 21:09, L.P.H. van Belle wrote: > New update. > > > > I now have done about 6 machines. > > 2 with samba 4.2.10 work fine, 2 not. > > 1 with samba 4.3.7 works fine, 1 not. > > > > I saw Jelmer updated the samba to 4.3.8 in sid, so i recompiled these to jessie. > > I upgraded the 4.3.7 to 4.3.8 Hi Louis, debian 4.2.10 is the same as