Re: [Xen-devel] [PATCH] XSM/policy: Allow the source domain access to settime and setdomainhandle domctls while creating domain.

2016-07-07 Thread Wei Liu
On Thu, Jul 07, 2016 at 10:49:01AM -0400, Daniel De Graaf wrote: > On 07/07/2016 09:45 AM, anshul.makkar.anshul.mak...@citrix.com wrote: > >From: Anshul Makkar > > > >This patch resolves the following permission denied scenarios while creating > >new domU : > >avc: denied { setdomainhandle } for

Re: [Xen-devel] [PATCH] XSM/policy: Allow the source domain access to settime and setdomainhandle domctls while creating domain.

2016-07-07 Thread Daniel De Graaf
On 07/07/2016 09:45 AM, anshul.makkar.anshul.mak...@citrix.com wrote: From: Anshul Makkar This patch resolves the following permission denied scenarios while creating new domU : avc: denied { setdomainhandle } for domid=0 target=1 scontext=system_u:system_r:dom0_t tcontext=system_u:system_r:d

[Xen-devel] [PATCH] XSM/policy: Allow the source domain access to settime and setdomainhandle domctls while creating domain.

2016-07-07 Thread Anshul Makkar anshul.makkar
From: Anshul Makkar This patch resolves the following permission denied scenarios while creating new domU : avc: denied { setdomainhandle } for domid=0 target=1 scontext=system_u:system_r:dom0_t tcontext=system_u:system_r:domU_t tclass=domain avc: denied { settime } for domid=0 target=1 sco