Intel® Active Management Technology
PATCH 1/1 Intel® Active Management Technology
Intel? AMT Linux support includes two components that allow interaction between the Intel? AMT FW and the Linux OS: Intel? MEI (Intel? Management Engine Interface) driver and LMS (Local Management Service) driver. Intel? MEI driver
allows application to communicate with the FW using host interface,
and LMS driver allows applications to access the Intel? AMT FW via the
local Intel? Management Engine Interface (Intel? MEI).
In addition, Intel has validated a kernel patch to enable IDE-redirection. This is a community maintained patch, but Intel is distributing the version used in the validation of the other Intel? AMT components released here:
http://software.intel.com/en-us/articles/download-the-latest-intel-amt-open-source-drivers/
Declare a mei_device_t device node tyoe and label /dev/mei accordingly.
policy/modules/kernel/devices.fc +1 -0
@@ -59,6 +59,7 @@ /dev/logibm -c gen_context(system_u:object_r:mouse_device_t,s0) /dev/lp.* -c gen_context(system_u:object_r:printer_device_t,s0) /dev/mcelog -c gen_context(system_u:object_r:kmsg_device_t,mls_systemhigh) +/dev/mei -c gen_context(system_u:object_r:mei_device_t,s0) /dev/mem -c gen_context(system_u:object_r:memory_device_t,mls_systemhigh) /dev/mergemem -c gen_context(system_u:object_r:memory_device_t,mls_systemhigh) /dev/mga_vid.* -c gen_context(system_u:object_r:xserver_misc_device_t,s0)
policy/modules/kernel/devices.te +3 -0
@@ -121,6 +121,9 @@ type lvm_control_t; dev_node(lvm_control_t) +type mei_device_t; +dev_node(mei_device_t) + # # memory_device_t is the type of /dev/kmem, # /dev/mem and /dev/port.
PATCH 1/1 Intel® Active Management Technology
Quoted 34 lines · Dominick Grift
Intel?? AMT Linux support includes two components that allow interaction between the Intel?? AMT FW and the Linux OS: Intel?? MEI (Intel?? Management Engine Interface) driver and LMS (Local Management Service) driver. Intel?? MEI driver
allows application to communicate with the FW using host interface,
and LMS driver allows applications to access the Intel?? AMT FW via the
local Intel?? Management Engine Interface (Intel?? MEI).In addition, Intel has validated a kernel patch to enable IDE-redirection. This is a community maintained patch, but Intel is distributing the version used in the validation of the other Intel?? AMT components released here:
http://software.intel.com/en-us/articles/download-the-latest-intel-amt-open-source-drivers/
Declare a
mei_device_tdevice node tyoe and label/dev/meiaccordingly.Signed-off-by Dominick Grift <[email protected]>policy/modules/kernel/devices.fc +1
-0@@ -59,6 +59,7 @@ /dev/logibm -c gen_context(system_u:object_r:mouse_device_t,s0) /dev/lp.* -c gen_context(system_u:object_r:printer_device_t,s0) /dev/mcelog -c gen_context(system_u:object_r:kmsg_device_t,mls_systemhigh) +/dev/mei -c gen_context(system_u:object_r:mei_device_t,s0) /dev/mem -c gen_context(system_u:object_r:memory_device_t,mls_systemhigh) /dev/mergemem -c gen_context(system_u:object_r:memory_device_t,mls_systemhigh) /dev/mga_vid.* -c gen_context(system_u:object_r:xserver_misc_device_t,s0)policy/modules/kernel/devices.te +0
-0
policy/modules/kernel/devices.te line 129
Quoted 9 lines
policy/modules/kernel/devices.te +3
-0@@ -121,6 +121,9 @@ type lvm_control_t; dev_node(lvm_control_t) +type mei_device_t; +dev_node(mei_device_t) + # # memory_device_t is the type of /dev/kmem, # /dev/mem and /dev/port.
Merged.
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com