xsm/schedop: introduce vcpuinfo permissions verification
authorAndrii Anisov <andrii_anisov@epam.com>
Tue, 27 Mar 2018 08:26:17 +0000 (10:26 +0200)
committerJan Beulich <jbeulich@suse.com>
Tue, 27 Mar 2018 08:26:17 +0000 (10:26 +0200)
commit99ebf740680cafa9df3b83841961f9cc1d4f774f
treed583c76170d6c0dcb9d75ccd6aa880a18e415a11
parent7356011ec2242f12caae461ed694a6f2796621f4
xsm/schedop: introduce vcpuinfo permissions verification

Introduce per-vcpu scheduler operations permission verification.
As long as Xvcpuinfo are in fact scheduler configuration manipulations
there is no need to introduce specific access vectors.

Signed-off-by: Andrii Anisov <andrii_anisov@epam.com>
Reviewed-by: Dario Faggioli <dfaggioli@suse.com>
Acked-by: Daniel De Graaf <dgegra@tycho.nsa.gov>
xen/xsm/flask/hooks.c
xen/xsm/flask/policy/access_vectors