Anshul Makkar f755485cbd XSM/policy: Allow the source domain access to settime and setdomainhandle domctls while creating domain. ...

This patch resolves the following permission denied scenarios while creating
new domU :
avc:  denied  { setdomainhandle } for domid=0 target=1
scontext=system_u:system_r:dom0_t tcontext=system_u:system_r:domU_t tclass=domain

avc:  denied  { settime } for domid=0 target=1 scontext=system_u:system_r:dom0_t
tcontext=system_u:system_r:domU_t tclass=domain

Signed-off-by: Anshul Makkar <anshul.makkar@citrix.com>
Acked-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>

2016-07-08 14:36:00 +01:00

..

modules

XSM/policy: Allow the source domain access to settime and setdomainhandle domctls while creating domain.

2016-07-08 14:36:00 +01:00

policy

flask/policy: remove unused example

2016-06-21 15:29:18 +01:00

Makefile

flask/policy: move user definitions and constraints into modules

2016-06-21 15:29:17 +01:00