Right now user can't set the policy, because there is nowhere to get the key handle from.
One of the options would be to have a qrexec call to dom0 to set the policy automatically (or with confirmation). A simpler to implement one would be to extract the handle from syslog.
Right now user can't set the policy, because there is nowhere to get the key handle from.
One of the options would be to have a qrexec call to dom0 to set the policy automatically (or with confirmation). A simpler to implement one would be to extract the handle from syslog.