Re: [Xen-devel] [PATCH for-4.5] flask/policy: Updates for example XSM policy

[Wei Liu <wei.liu2@xxxxxxxxxx>]

On Mon, Sep 22, 2014 at 04:23:18PM -0400, Daniel De Graaf wrote:
> The example XSM policy was missing permission for dom0_t to migrate
> domains with label domU_t; add these permissions.
> 
> Reported-by: Wei Liu <wei.liu2@xxxxxxxxxx>
> Signed-off-by: Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>

Thanks.

This seems to work to a certain degree. I now hit a new error when
trying to save a domain (PV and HVM).

(XEN) avc:  denied  { map_read } for domid=0 target=32754 scontext=system_u:sysu

And HVM guest creation for both QEMU upstream and traditional works.

Wei.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel