Re: [Xen-devel] [PATCH v2] XSM-Policy: allow source domain access to setpodtarget and getpodtarget for ballooning.

[Andrew Cooper <andrew.cooper3@xxxxxxxxxx>]

On 14/07/16 15:46, Anshul Makkar wrote:
> Access to setpodtarget and getpodtarget is required by dom0 to set the balloon
> targets for domU. The patch gives source domain (dom0) access to set
> this target for domU and resolve the following permission denied erro
> message during ballooning :
> avc:  denied  { setpodtarget } for domid=0 target=9
> scontext=system_u:system_r:dom0_t
> tcontext=system_u:system_r:domU_t tclass=domain
>
> Signed-off-by: Anshul Makkar <anshul.makkar@xxxxxxxxxx>
> Acked-by: Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>

Committed, thanks.

~Andrew

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
https://lists.xen.org/xen-devel