mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 18:21:39 +01:00
Daniel De Graaf
31689dcb0f
This makes it easier to enable or disable parts of the XSM policy. Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov> Reviewed-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> Reviewed-by: Doug Goldstein <cardoe@cardoe.com>
15 lines
502 B
Plaintext
15 lines
502 B
Plaintext
###############################################################################
|
|
#
|
|
# Device delegation
|
|
#
|
|
# This requires that the device be labeled with a type defined here. You can
|
|
# use flask-label-pci to dynamically label devices on each boot or define the
|
|
# labels statically in tools/flask/policy/policy/device_contexts
|
|
#
|
|
###############################################################################
|
|
|
|
type nic_dev_t, resource_type;
|
|
|
|
admin_device(dom0_t, nic_dev_t)
|
|
use_device(domU_t, nic_dev_t)
|