ia64/xen-unstable

changeset 18589:d5bd0567b458

flask: Add 2 permissions to the default flask policy to get a VIF-enabled guest to work

This adds two more permissions to the default Flask policy to get a VM
with a network interface to work.

Signed-off-by: Stefan Berger <stefanb@us.ibm.com>
author Keir Fraser <keir.fraser@citrix.com>
date Wed Oct 08 10:03:09 2008 +0100 (2008-10-08)
parents 79ffff76e300
children 1f85f7b216b3
files tools/flask/policy/policy/modules/xen/xen.te
line diff
     1.1 --- a/tools/flask/policy/policy/modules/xen/xen.te	Wed Oct 08 10:02:27 2008 +0100
     1.2 +++ b/tools/flask/policy/policy/modules/xen/xen.te	Wed Oct 08 10:03:09 2008 +0100
     1.3 @@ -110,6 +110,9 @@ allow dom0_t evchn0-U_t:event {send};
     1.4  create_channel(domU_t, dom0_t, evchnU-0_t)
     1.5  allow domU_t evchnU-0_t:event {send};
     1.6  
     1.7 +allow dom0_t dom0_t:event {send};
     1.8 +allow dom0_t domU_t:grant {copy};
     1.9 +
    1.10  manage_domain(dom0_t, domU_t)
    1.11  
    1.12  ################################################################################