diff options
| author | Daniel De Graaf <dgdegra@tycho.nsa.gov> | 2013-05-30 08:57:22 -0400 |
|---|---|---|
| committer | Ian Campbell <ian.campbell@citrix.com> | 2013-06-12 10:09:15 +0100 |
| commit | b61b893d204423aa98f48ceb49e9855ae2ba1aa5 (patch) | |
| tree | 0e4559aeef3c948bd8203f0dd6ad477179349525 /tools/flask | |
| parent | 613659da9b1755ddf0a291071f6551a0ad25419b (diff) | |
| download | xen-b61b893d204423aa98f48ceb49e9855ae2ba1aa5.tar.gz xen-b61b893d204423aa98f48ceb49e9855ae2ba1aa5.tar.bz2 xen-b61b893d204423aa98f48ceb49e9855ae2ba1aa5.zip | |
flask/policy: device model stubdom fixes
This fixes framebuffer support for device model stubdoms after 3f28d007
which added the target_hack permission but did not allow the permission
to the stubdom it was created for.
Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Acked-by: Ian Campbell <ian.campbell@citrix.com>
Diffstat (limited to 'tools/flask')
| -rw-r--r-- | tools/flask/policy/policy/modules/xen/xen.if | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/tools/flask/policy/policy/modules/xen/xen.if b/tools/flask/policy/policy/modules/xen/xen.if index c86a6189c6..97af0a8623 100644 --- a/tools/flask/policy/policy/modules/xen/xen.if +++ b/tools/flask/policy/policy/modules/xen/xen.if @@ -143,7 +143,7 @@ define(`device_model', ` allow $1 $2_channel:event create; allow $1 $2_target:domain shutdown; - allow $1 $2_target:mmu { map_read map_write adjust physmap }; + allow $1 $2_target:mmu { map_read map_write adjust physmap target_hack }; allow $1 $2_target:hvm { getparam setparam trackdirtyvram hvmctl irqlevel pciroute cacheattr send_irq }; ') |