diff options
author | Keir Fraser <keir.fraser@citrix.com> | 2008-10-08 10:02:27 +0100 |
---|---|---|
committer | Keir Fraser <keir.fraser@citrix.com> | 2008-10-08 10:02:27 +0100 |
commit | 4208b9286f8df0c8390490455727579bf5d9d037 (patch) | |
tree | 9a2762c7e4d5adeeb9419a4e0df0bbaf22a2f762 /tools/flask | |
parent | 688581c472af0cd499ac133f8ec52325fc601a19 (diff) | |
download | xen-4208b9286f8df0c8390490455727579bf5d9d037.tar.gz xen-4208b9286f8df0c8390490455727579bf5d9d037.tar.bz2 xen-4208b9286f8df0c8390490455727579bf5d9d037.zip |
flask: Fix to default policy to get simple VM running
This fix gets to the default Flask/XSM policy gets a simple guest VM
(Ramdisk only, no VIF) running.
Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
Diffstat (limited to 'tools/flask')
-rw-r--r-- | tools/flask/policy/policy/modules/xen/xen.te | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/tools/flask/policy/policy/modules/xen/xen.te b/tools/flask/policy/policy/modules/xen/xen.te index 70fbfc0774..dff345c7e9 100644 --- a/tools/flask/policy/policy/modules/xen/xen.te +++ b/tools/flask/policy/policy/modules/xen/xen.te @@ -33,7 +33,7 @@ define(`create_domain', ` getvcpuinfo getaddrsize getvcpuaffinity}; allow $1 $2:shadow {enable}; allow $1 $2:mmu {map_read map_write memorymap adjust pinpage}; - allow $2 $2:mmu {map_read map_write pinpage}; + allow $2 $2:mmu {map_read map_write adjust pinpage}; allow $2 domio_t:mmu {map_read}; allow $2 $2:grant {query setup}; allow $1 $2:grant {map_read unmap}; |