xsm: allow relevant permission during migrate and gpu-passthrough.
authorAnshul Makkar <anshul.makkar@citrix.com>
Mon, 12 Dec 2016 14:00:05 +0000 (14:00 +0000)
committerWei Liu <wei.liu2@citrix.com>
Fri, 16 Dec 2016 11:19:22 +0000 (11:19 +0000)
commitf04722f78b0f64e1f147389962d8f393a2fa8a7a
tree8cdd2d94ab4d82cfea55f4ecde2488ec329b4571
parent1361db0ed3ad1217bd039a3cac5df49a622e12a9
xsm: allow relevant permission during migrate and gpu-passthrough.

During guest migrate allow permission to prevent
spurious page faults.
Prevents these errors:
d73: Non-privileged (73) attempt to map I/O space 00000000

avc: denied  { set_misc_info } for domid=0 target=11
scontext=system_u:system_r:dom0_t
tcontext=system_u:system_r:domU_t tclass=domain

GPU passthrough for hvm guest:
avc:  denied  { send_irq } for domid=0 target=10
scontext=system_u:system_r:dom0_t
tcontext=system_u:system_r:domU_t tclass=hvm

Signed-off-by: Anshul Makkar <anshul.makkar@citrix.com>
Acked-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
tools/flask/policy/modules/xen.if