diff options
| author | Keir Fraser <keir.fraser@citrix.com> | 2008-10-08 10:02:27 +0100 |
|---|---|---|
| committer | Keir Fraser <keir.fraser@citrix.com> | 2008-10-08 10:02:27 +0100 |
| commit | 4208b9286f8df0c8390490455727579bf5d9d037 (patch) | |
| tree | 9a2762c7e4d5adeeb9419a4e0df0bbaf22a2f762 /tools/flask/policy | |
| parent | 688581c472af0cd499ac133f8ec52325fc601a19 (diff) | |
| download | xen-4208b9286f8df0c8390490455727579bf5d9d037.tar.gz xen-4208b9286f8df0c8390490455727579bf5d9d037.tar.bz2 xen-4208b9286f8df0c8390490455727579bf5d9d037.zip | |
flask: Fix to default policy to get simple VM running
This fix gets to the default Flask/XSM policy gets a simple guest VM
(Ramdisk only, no VIF) running.
Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
Diffstat (limited to 'tools/flask/policy')
| -rw-r--r-- | tools/flask/policy/policy/modules/xen/xen.te | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/tools/flask/policy/policy/modules/xen/xen.te b/tools/flask/policy/policy/modules/xen/xen.te index 70fbfc0774..dff345c7e9 100644 --- a/tools/flask/policy/policy/modules/xen/xen.te +++ b/tools/flask/policy/policy/modules/xen/xen.te @@ -33,7 +33,7 @@ define(`create_domain', ` getvcpuinfo getaddrsize getvcpuaffinity}; allow $1 $2:shadow {enable}; allow $1 $2:mmu {map_read map_write memorymap adjust pinpage}; - allow $2 $2:mmu {map_read map_write pinpage}; + allow $2 $2:mmu {map_read map_write adjust pinpage}; allow $2 domio_t:mmu {map_read}; allow $2 $2:grant {query setup}; allow $1 $2:grant {map_read unmap}; |