ia64/xen-unstable

changeset 18588:79ffff76e300

flask: Fix to default policy to get simple VM running

This fix gets to the default Flask/XSM policy gets a simple guest VM
(Ramdisk only, no VIF) running.

Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
author Keir Fraser <keir.fraser@citrix.com>
date Wed Oct 08 10:02:27 2008 +0100 (2008-10-08)
parents 78e98657021a
children d5bd0567b458
files tools/flask/policy/policy/modules/xen/xen.te
line diff
     1.1 --- a/tools/flask/policy/policy/modules/xen/xen.te	Fri Oct 03 09:42:11 2008 +0100
     1.2 +++ b/tools/flask/policy/policy/modules/xen/xen.te	Wed Oct 08 10:02:27 2008 +0100
     1.3 @@ -33,7 +33,7 @@ define(`create_domain', `
     1.4  				getvcpuinfo getaddrsize getvcpuaffinity};
     1.5  	allow $1 $2:shadow {enable};
     1.6  	allow $1 $2:mmu {map_read map_write memorymap adjust pinpage};
     1.7 -	allow $2 $2:mmu {map_read map_write pinpage};
     1.8 +	allow $2 $2:mmu {map_read map_write adjust pinpage};
     1.9  	allow $2 domio_t:mmu {map_read};
    1.10  	allow $2 $2:grant {query setup};
    1.11  	allow $1 $2:grant {map_read unmap};