From: Daniel De Graaf Date: Thu, 30 May 2013 12:57:22 +0000 (-0400) Subject: flask/policy: device model stubdom fixes X-Git-Url: http://xenbits.xensource.com/gitweb?a=commitdiff_plain;h=b61b893d204423aa98f48ceb49e9855ae2ba1aa5;p=people%2Faperard%2Fxen-arm.git flask/policy: device model stubdom fixes This fixes framebuffer support for device model stubdoms after 3f28d007 which added the target_hack permission but did not allow the permission to the stubdom it was created for. Signed-off-by: Daniel De Graaf Acked-by: Ian Campbell --- diff --git a/tools/flask/policy/policy/modules/xen/xen.if b/tools/flask/policy/policy/modules/xen/xen.if index c86a6189c6..97af0a8623 100644 --- a/tools/flask/policy/policy/modules/xen/xen.if +++ b/tools/flask/policy/policy/modules/xen/xen.if @@ -143,7 +143,7 @@ define(`device_model', ` allow $1 $2_channel:event create; allow $1 $2_target:domain shutdown; - allow $1 $2_target:mmu { map_read map_write adjust physmap }; + allow $1 $2_target:mmu { map_read map_write adjust physmap target_hack }; allow $1 $2_target:hvm { getparam setparam trackdirtyvram hvmctl irqlevel pciroute cacheattr send_irq }; ')