[Xen-changelog] [xen master] xsm: Permit dom0 to use dmops

[patchbot@xxxxxxx]

commit 5a77ccf609da289131bd1664ee20c17b1f9bb93c
Author:     Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
AuthorDate: Fri Jan 27 14:16:58 2017 +0000
Commit:     Ian Jackson <Ian.Jackson@xxxxxxxxxxxxx>
CommitDate: Mon Jan 30 12:03:55 2017 +0000

    xsm: Permit dom0 to use dmops
    
    c/s 524a98c2ac5 "public / x86: introduce __HYPERCALL_dm_op" gave flask
    permisisons for a stubdomain to use dmops, but omitted the case of a device
    model running in dom0.
    
    Signed-off-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
    Reviewed-by: Wei Liu <wei.liu2@xxxxxxxxxx>
    Tested-by: Paul Durrant <paul.durrant@xxxxxxxxxx>
---
 tools/flask/policy/modules/xen.if | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/flask/policy/modules/xen.if 
b/tools/flask/policy/modules/xen.if
index f5d254f..ed0df4f 100644
--- a/tools/flask/policy/modules/xen.if
+++ b/tools/flask/policy/modules/xen.if
@@ -58,7 +58,7 @@ define(`create_domain_common', `
        allow $1 $2:mmu { map_read map_write adjust memorymap physmap pinpage 
mmuext_op updatemp };
        allow $1 $2:grant setup;
        allow $1 $2:hvm { cacheattr getparam hvmctl sethvmc
-                       setparam nested altp2mhvm altp2mhvm_op };
+                       setparam nested altp2mhvm altp2mhvm_op dm };
 ')
 
 # create_domain(priv, target)
--
generated by git-patchbot for /home/xen/git/xen.git#master

_______________________________________________
Xen-changelog mailing list
Xen-changelog@xxxxxxxxxxxxx
https://lists.xenproject.org/xen-changelog