From b61b893d204423aa98f48ceb49e9855ae2ba1aa5 Mon Sep 17 00:00:00 2001 From: Daniel De Graaf Date: Thu, 30 May 2013 08:57:22 -0400 Subject: flask/policy: device model stubdom fixes This fixes framebuffer support for device model stubdoms after 3f28d007 which added the target_hack permission but did not allow the permission to the stubdom it was created for. Signed-off-by: Daniel De Graaf Acked-by: Ian Campbell --- tools/flask/policy/policy/modules/xen/xen.if | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'tools/flask') diff --git a/tools/flask/policy/policy/modules/xen/xen.if b/tools/flask/policy/policy/modules/xen/xen.if index c86a6189c6..97af0a8623 100644 --- a/tools/flask/policy/policy/modules/xen/xen.if +++ b/tools/flask/policy/policy/modules/xen/xen.if @@ -143,7 +143,7 @@ define(`device_model', ` allow $1 $2_channel:event create; allow $1 $2_target:domain shutdown; - allow $1 $2_target:mmu { map_read map_write adjust physmap }; + allow $1 $2_target:mmu { map_read map_write adjust physmap target_hack }; allow $1 $2_target:hvm { getparam setparam trackdirtyvram hvmctl irqlevel pciroute cacheattr send_irq }; ') -- cgit v1.2.3