* [PATCH] flask/policy: allow dom0 to use PHYSDEVOP_pci_mmcfg_reserved
@ 2018-11-02 17:46 Daniel De Graaf
2018-11-02 18:26 ` Andrew Cooper
0 siblings, 1 reply; 2+ messages in thread
From: Daniel De Graaf @ 2018-11-02 17:46 UTC (permalink / raw)
To: xen-devel; +Cc: Andrew Cooper, Daniel De Graaf
Reported-by: Andrew Cooper <andrew.cooper3@citrix.com>
Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
---
tools/flask/policy/modules/dom0.te | 3 +++
1 file changed, 3 insertions(+)
diff --git a/tools/flask/policy/modules/dom0.te b/tools/flask/policy/modules/dom0.te
index dfdcdcd128..a0566671d6 100644
--- a/tools/flask/policy/modules/dom0.te
+++ b/tools/flask/policy/modules/dom0.te
@@ -66,6 +66,9 @@ allow dom0_t security_t:security { load_policy setenforce setbool };
# Audit policy change events even when they are allowed
auditallow dom0_t security_t:security { load_policy setenforce setbool };
+# Allow dom0 to report platform configuration changes back to the hypervisor
+allow dom0_t xen_t:resource setup;
+
admin_device(dom0_t, device_t)
admin_device(dom0_t, irq_t)
admin_device(dom0_t, ioport_t)
--
2.14.5
_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xenproject.org
https://lists.xenproject.org/mailman/listinfo/xen-devel
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: [PATCH] flask/policy: allow dom0 to use PHYSDEVOP_pci_mmcfg_reserved
2018-11-02 17:46 [PATCH] flask/policy: allow dom0 to use PHYSDEVOP_pci_mmcfg_reserved Daniel De Graaf
@ 2018-11-02 18:26 ` Andrew Cooper
0 siblings, 0 replies; 2+ messages in thread
From: Andrew Cooper @ 2018-11-02 18:26 UTC (permalink / raw)
To: Daniel De Graaf, xen-devel
On 02/11/18 17:46, Daniel De Graaf wrote:
> Reported-by: Andrew Cooper <andrew.cooper3@citrix.com>
> Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Acked-by: Andrew Cooper <andrew.cooper3@citrix.com>
_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xenproject.org
https://lists.xenproject.org/mailman/listinfo/xen-devel
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2018-11-02 18:26 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2018-11-02 17:46 [PATCH] flask/policy: allow dom0 to use PHYSDEVOP_pci_mmcfg_reserved Daniel De Graaf
2018-11-02 18:26 ` Andrew Cooper
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).