Re: [Xen-devel] [PATCH] XSM/policy: Allow the source domain access to settime and setdomainhandle domctls while creating domain.

[Wei Liu <wei.liu2@xxxxxxxxxx>]

On Thu, Jul 07, 2016 at 10:49:01AM -0400, Daniel De Graaf wrote:
> On 07/07/2016 09:45 AM, Anshul.Makkar.anshul.makkar@xxxxxxxxxx wrote:
> >From: Anshul Makkar <anshul.makkar@xxxxxxxxxx>
> >
> >This patch resolves the following permission denied scenarios while creating
> >new domU :
> >avc:  denied  { setdomainhandle } for domid=0 target=1
> >scontext=system_u:system_r:dom0_t tcontext=system_u:system_r:domU_t 
> >tclass=domain
> >
> >avc:  denied  { settime } for domid=0 target=1 
> >scontext=system_u:system_r:dom0_t
> >tcontext=system_u:system_r:domU_t tclass=domain
> >
> >Signed-off-by: Anshul Makkar <anshul.makkar@xxxxxxxxxx>
> 
> Acked-by: Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>

Queued. Thank you both.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
https://lists.xen.org/xen-devel