From e628c3b0b888ac4291e8d963eb01f420ffca10ad Mon Sep 17 00:00:00 2001 From: Daniel De Graaf Date: Sun, 18 Dec 2011 14:35:03 +0000 Subject: xl.pod.1: improve documentation of FLASK commands Signed-off-by: Daniel De Graaf --- docs/man/xl.pod.1 | 38 ++++++++++++++++++++++---------------- 1 file changed, 22 insertions(+), 16 deletions(-) (limited to 'docs/man') diff --git a/docs/man/xl.pod.1 b/docs/man/xl.pod.1 index 5a39ae5cdf..72196ee28b 100644 --- a/docs/man/xl.pod.1 +++ b/docs/man/xl.pod.1 @@ -197,10 +197,6 @@ I specified, without pausing the domain. The dump file will be written to a distribution specific directory for dump files. Such as: /var/lib/xen/dump or /var/xen/dump. -=item B - -Returns the current enforcing mode of the Flask Xen security module. - =item B [I<--long>] Displays the short help message (i.e. common commands). @@ -303,10 +299,6 @@ less utilized than a high CPU workload. Consider yourself warned. =back -=item B I - -Loads a new policy int the Flask Xen security module. - =item B I I Specify the maximum amount of memory the domain is able to use, appending 't' @@ -397,10 +389,6 @@ Enable debug messages. =back -=item B I<1|0|Enforcing|Permissive> - -Sets the current enforcing mode of the Flask Xen security module - =item B [I] I I [I] Saves a running domain to a state file so that it can be restored @@ -997,6 +985,28 @@ Get information about how much freeable memory (MB) is in-use by tmem. =back +=head2 FLASK + +=over 4 + +=item B + +Determine if the FLASK security module is loaded and enforcing its policy. + +=item B I<1|0|Enforcing|Permissive> + +Enable or disable enforcing of the FLASK access controls. The default is +permissive and can be changed using the flask_enforcing option on the +hypervisor's command line. + +=item B I + +Load FLASK policy from the given policy file. The initial policy is provided to +the hypervisor as a multiboot module; this command allows runtime updates to the +policy. Loading new security policy will reset runtime changes to device labels. + +=back + =head1 TO BE DOCUMENTED We need better documentation for: @@ -1007,10 +1017,6 @@ We need better documentation for: Trascendent Memory. -=item B - -Xen Flask security module. - =back =head1 SEE ALSO -- cgit v1.2.3