xsm: allow relevant permission during migrate and gpu-passthrough.
authorAnshul Makkar <anshul.makkar@citrix.com>
Mon, 12 Dec 2016 14:00:05 +0000 (14:00 +0000)
committerIan Jackson <Ian.Jackson@eu.citrix.com>
Wed, 4 Jan 2017 17:02:28 +0000 (17:02 +0000)
commitbdbfca040a087d7fc5f1a9cfdd0e3b3a45498d24
tree5f4598cfd2bab59b8d78832d66ac1a2bde54b415
parent443264ea123ca766a83a3cd37e25e23f171143f9
xsm: allow relevant permission during migrate and gpu-passthrough.

During guest migrate allow permission to prevent
spurious page faults.
Prevents these errors:
d73: Non-privileged (73) attempt to map I/O space 00000000

avc: denied  { set_misc_info } for domid=0 target=11
scontext=system_u:system_r:dom0_t
tcontext=system_u:system_r:domU_t tclass=domain

GPU passthrough for hvm guest:
avc:  denied  { send_irq } for domid=0 target=10
scontext=system_u:system_r:dom0_t
tcontext=system_u:system_r:domU_t tclass=hvm

Signed-off-by: Anshul Makkar <anshul.makkar@citrix.com>
Acked-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
(cherry picked from commit f04722f78b0f64e1f147389962d8f393a2fa8a7a)
tools/flask/policy/modules/xen.if