ehmry/genodepkgs
ehmry
/
genodepkgs
2
0
Fork 0
Code Releases Activity

nixos: audit file_system

This commit is contained in:
Ehmry - 2020-05-23 14:54:38 +05:30
parent de907fa360
commit ae0074d8dc
2 changed files with 28 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nixos-modules/default.nix
View File

@ -78,6 +78,7 @@ let
"vbox5" "vbox5"
"intel_fb_drv" "intel_fb_drv"
"vfs" "vfs"
"vfs_audit"
"vfs_ttf" "vfs_ttf"
] ++ (with pkgs'; [ base-nova block_router ]); ] ++ (with pkgs'; [ base-nova block_router ]);
extraBinaries = [ extraBinaries = [
@ -91,6 +92,7 @@ let
"librump_fs.so" "librump_fs.so"
"libstdcxx.so" "libstdcxx.so"
"libvfs.so" "libvfs.so"
"libvfs_audit.so"
"libvfs_rump.so" "libvfs_rump.so"
"libvfs_ttf.so" "libvfs_ttf.so"
]; ];

36
nixos-modules/dhall/vbox-host.dhall
View File

@ -286,7 +286,7 @@ let rootInit =
Child.Attributes::{ Child.Attributes::{
, binary = "nit_fb" , binary = "nit_fb"
, config = Init.Config::{ , config = Init.Config::{
, attributes = toMap { xpos = "600", width = "600" } , attributes = toMap { width = "600", height = "768" }
} }
, provides = [ "Framebuffer", "Input" ] , provides = [ "Framebuffer", "Input" ]
, resources = Resources::{ ram = Genode.units.MiB 8 } , resources = Resources::{ ram = Genode.units.MiB 8 }
@ -465,13 +465,29 @@ let rootInit =
{ name = "vfs" { name = "vfs"
, attributes = XML.emptyAttributes , attributes = XML.emptyAttributes
, content = , content =
[ XML.leaf [ XML.element
{ name = "rump" { name = "dir"
, attributes = toMap , attributes = toMap { name = "ext2" }
{ fs = "ext2fs" , content =
, writeable = "yes" [ XML.leaf
, ram = "8M" { name = "rump"
} , attributes = toMap
{ fs = "ext2fs"
, writeable = "yes"
, ram = "8M"
}
}
]
}
, XML.element
{ name = "dir"
, attributes = toMap { name = "audit" }
, content =
[ XML.leaf
{ name = "audit"
, attributes = toMap { path = "ext2" }
}
]
} }
] ]
} }
@ -479,7 +495,7 @@ let rootInit =
{ name = "policy" { name = "policy"
, attributes = toMap , attributes = toMap
{ label_prefix = "chroot" { label_prefix = "chroot"
, root = "/" , root = "/audit"
, writeable = "yes" , writeable = "yes"
} }
} }
@ -487,7 +503,7 @@ let rootInit =
{ name = "policy" { name = "policy"
, attributes = toMap , attributes = toMap
{ label = "nix" { label = "nix"
, root = "/store" , root = "/audit/store"
, writeable = "no" , writeable = "no"
} }
} }