mirror of
https://github.com/xen-project/xen.git
synced 2026-10-29 18:50:05 +01:00
flask/policy: allow dom0 to use PHYSDEVOP_pci_mmcfg_reserved
Reported-by: Andrew Cooper <andrew.cooper3@citrix.com> Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov> Acked-by: Andrew Cooper <andrew.cooper3@citrix.com>
This commit is contained in:
Daniel De Graaf authored and 
Andrew Cooper committed
1 parent
27bd5ef5c8
commit
011319e9ce
1 file changed
+3
@@ -66,6 +66,9 @@ allow dom0_t security_t:security { load_policy setenforce setbool };
|
||||
# Audit policy change events even when they are allowed
|
||||
auditallow dom0_t security_t:security { load_policy setenforce setbool };
|
||||
|
||||
# Allow dom0 to report platform configuration changes back to the hypervisor
|
||||
allow dom0_t xen_t:resource setup;
|
||||
|
||||
admin_device(dom0_t, device_t)
|
||||
admin_device(dom0_t, irq_t)
|
||||
admin_device(dom0_t, ioport_t)
|
||||
|
||||