Machon Gregory
2010-Jan-22 16:05 UTC
[Xen-devel] [PATCH] tools/ Exposes Flask XSM AVC functions to user-space
This patch exposes the flask_access, flask_avc_cachestats, flask_avc_hashstats, flask_getavc_threshold, flask_setavc_threshold, and flask_policyvers functions to user-space. A python wrapper was created for the flask_access function to facilitate policy based user-space access control decisions. flask.h was renamed to libflask.h to remove a naming conflict. Signed-off-by : Machon Gregory <mbgrego@tycho.ncsc.mil> --- tools/flask/libflask/Makefile | 2 tools/flask/libflask/flask_op.c | 159 +++++++++++++++++++++++++++++++- tools/flask/libflask/include/flask.h | 43 -------- tools/flask/libflask/include/libflask.h | 53 ++++++++++ tools/flask/utils/getenforce.c | 2 tools/flask/utils/loadpolicy.c | 2 tools/flask/utils/setenforce.c | 2 tools/python/xen/lowlevel/flask/flask.c | 60 +++++++++++- 8 files changed, 274 insertions(+), 49 deletions(-) _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel
Keir Fraser
2010-Jan-22 16:50 UTC
Re: [Xen-devel] [PATCH] tools/ Exposes Flask XSM AVC functions to user-space
Is this intended for 4.0.0? -- Keir On 22/01/2010 16:05, "Machon Gregory" <mbgrego@tycho.ncsc.mil> wrote:> This patch exposes the flask_access, flask_avc_cachestats, > flask_avc_hashstats, flask_getavc_threshold, flask_setavc_threshold, and > flask_policyvers functions to user-space. A python wrapper was created > for the flask_access function to facilitate policy based user-space > access control decisions. flask.h was renamed to libflask.h to remove a > naming conflict. > > Signed-off-by : Machon Gregory <mbgrego@tycho.ncsc.mil> > > --- > > tools/flask/libflask/Makefile | 2 > tools/flask/libflask/flask_op.c | 159 > +++++++++++++++++++++++++++++++- > tools/flask/libflask/include/flask.h | 43 -------- > tools/flask/libflask/include/libflask.h | 53 ++++++++++ > tools/flask/utils/getenforce.c | 2 > tools/flask/utils/loadpolicy.c | 2 > tools/flask/utils/setenforce.c | 2 > tools/python/xen/lowlevel/flask/flask.c | 60 +++++++++++- > 8 files changed, 274 insertions(+), 49 deletions(-) > > >_______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel