similar to: [Patch 1 / 8][ACM] - name and simplify security policies

This patch fixes an indentation error in main.py. The effect of this bug is that block-attach does not check labels if the ACM is active. This bug slipped in with change set 11572_:_ ad22c711ccb7 <http://xenbits.xensource.com/xen-unstable.hg?cs=ad22c711ccb7>. This patch is essential and should get into 3.0.3. I tested the patch with security off and on. Thanks Reiner P.S. We are

This patch adds an ACM hook into the network scripts (/etc/xen/scripts). It adds iptables rules that enforce mandatory access control on network packets exchanged between virtual interfaces. If ACM is active, this patch sets the default FORWARD policy in Dom0 to DROP and adds iptables ACCEPT rules between vifs that belong to domains that are permitted to share (determined by using the

This patch fixes return codes for the acm-related Xen management scripts (error conditions) and addresses minor issues that ''pycheck'' complains about. It is tested with xm-test and by manually running the xm commands. It also handles the return case (reported by Masaki Kanno) that was missed in the originally patch. Signed-off by: Reiner Sailer <sailer@us.ibm.com>

Same functionality as the previous patches in this series. I have updated the error handling to correct the problems discovered by Ewan. This patch successfully completes the xm-test suite on my dev machine. In addition, we have tested out the affected commands by hand to ensure that error handling is being done properly. Hopefully this one will not create any more problems.

This patch: * adds a C-based security policy translation tool to Xen (secpol_xml2bin) and removes the current Java security policy translator (Java dependencies). The C-based tool integrates into the Xen source tree build and install (using gnome libxml2 for XML parsing). See install.txt. * introduces security labels and related tools. Users can now use semantic-rich label names to put

Updates xensec_ezpolicy ACM policy generation tool so that it works with wxPython under Python 2.5 as well. Thanks Reiner Signed-off by: Reiner Sailer <sailer@us.ibm.com> _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel

Hi all, Could you teach me about the behavior of xm commands when ''ACMError'' occurred? I am testing the behavior of xm commands with wrong arguments. When I tested xm commands related to security (xm *label/*policy), I found that some of them. - return 0, - show ACMError''s Traceback messages. Are these results specifications or bugs? Example: # xm cfgbootpolicy

Hi, as a follow-up to the posting of the sHype patches for Xen from Tue/We this week [http://lists.xensource.com/archives/html/xen-devel/2005-03/msg01371.html], you''ll find attached the promised draft Readme for the courageous ones to get a little exposure to sHype at a small example. I am posting this right before being away-from-email until April 11th. Please be patient when

> From: David Hopwood <david@bl...> > [image removed] Re: trusted computing > 2004-10-18 19:24 > Tim Freeman wrote: > > > not about Xen in particular, but as a side note, because I think some > > people are interested in trusted computing and virtualization? If > > you"re not, sorry for the intrusion! > > > >

Hi all, I want to build sHype into Xen on ubuntu 8.04, In Config.mk I changed XSM_ENABLE ?= n to XSM_ENABLE ?= y ACM_SECURITY ?= n to ACM_SECURITY ?= y; then #make xen tools #make install-xen install-tools without any error; but when I reboot and type "xm resetpolicy", I got an error "ACM policy

I am using a CentOS 5.2 x86_64 machine and compiled Xen 3.3.0. Everything seemed to build and install okay. After rebooting to the new of Xen, when I try to create a new domU, I get an error message saying "ACMError: Policy file ''/etc/xen/acm-security/policies/-security_policy.xml'' not found." I tried to find some documentation on what this is but I coming up with

Hi All, There is no /etc/xen/acm-security directory or xensec programs. Then I created the /etc/xen/acm-security/policies directory and copied the client_v1-security-policy.xml from the source/tools/security/policies/examples directory. I then executed command xm makepolicy /etc/xen/acm-security/policies/client_v1-security-policy.xml I got an error saying: ACMError: Unknown policy

Hi,all xen: 4.1.2 dom0 linux: centos 3.1.10 #1 SMP Tue Jun 26 17:13:57 EDT 2012 x86_64 x86_64 x86_64 GNU/Linux I enabled ACM and install xen-4.1.2 correctly, dom0 can also boot successfully, but if i use command xm create to create a domU, dom0 reboots. Does xen-4.1.2 support ACM, or how can i solve this bug? please help me. many thanks !

Hi,all xen: 4.1.2 dom0 linux: centos 3.1.10 #1 SMP Tue Jun 26 17:13:57 EDT 2012 x86_64 x86_64 x86_64 GNU/Linux I enabled ACM and install xen-4.1.2 correctly, dom0 can also boot successfully, but if i use command xm create to create a domU, dom0 reboots. Does xen-4.1.2 support ACM, or how can i solve this bug? please help me. many thanks !

Hi , When cw is used, dom0 reboots. Though I set quest memory size. I want to study into the cause. Please teach how to examine it. #xm create vm1.conf <-- OK #xm create vm4.conf <-- NO ................... <-- system boot #last root pts/1 myPC Tue Sep 25 11:25 - crash (09:01) reboot system boot 2.6.18-xen Tue Sep 25 20:06 (-8:-16) ~~~~~~~~~~~

Hi all, I''ve successfully installed xen3.3.0 on Linux ubuntu 2.6.27.5 #1 SMP i686 GNU/Linux. I built xen with the requisite XSM_ENABLE=y, ACM_SECURITY=y and believe I have the correct config parameters in the 2.6.27.5 kernel. Boot goes smoothly, set to automatically create 2 domUs. All appears okay with XSM/ACM... root@ubuntu:~# xm dmesg | grep -i xsm (XEN) XSM Framework v1.0.0

I was just looking for an easy way to convert between COM datetime and chron datetime (both ways.) I found examples on the list, but they involved origin. Does anyone have functions for converting COM datetime <-> chron datetimethat work "safely"? David L. Reiner > -----Original Message----- > From: Gabor Grothendieck [mailto:ggrothendieck@gmail.com] >

The URL listed under https://svn.r-project.org/R/trunk/share/licenses/license.db for the ACM license, http://www.acm.org/publications/policies/softwarecrnotice , gives a 404 error. I think this should be replaced by https://www.acm.org/publications/policies/software-copyright-notice ? For what it's worth, the original page did exist as recently as 5 April 2016:

This is a windows-specific question. After generating a plot, I can print from scripts or the command line with > dev.print(win.print,printer="local windows printer name") I would like to print in landscape mode. From the menus, I can accomplish this by changing the properties of the printer before clicking "print". However, I tried adding

This patchset allows the user to define and manage groups of domains. The patch augments the xm utility with the following commands: grp-create, grp-shutdown, grp-destroy, grp-reboot, grp-pause, grp-unpause, grp-save, grp-restore, grp-join, and grp-migrate. A goal during development of group operations was to match support for common domain operations: create, shutdown, destroy, reboot, pause,