Merge pull request #2 from cjp256/oxt-293

jean-edouard · jean-edouard · commit a954c98a4bb0 · 2015-05-26T15:17:54.000-04:00
xsm: add send_irq for dom0 and stubdom -&gt; hvm guests
diff --git a/policy/modules/xen/stubdom.if b/policy/modules/xen/stubdom.if
@@ -89,7 +89,7 @@ interface(`stubdom_ioemu',`
 	allow stubdom_t $1:resource { add remove };
 	allow stubdom_t $1:domain { set_target shutdown settime };
 	allow stubdom_t $1:hvm { cacheattr getparam irqlevel pcilevel pciroute
-				 setparam trackdirtyvram hvmctl };
+				 setparam trackdirtyvram hvmctl send_irq };
 	allow stubdom_t $1:mmu { adjust physmap map_read map_write };
 	allow stubdom_t $1:grant copy;
 	allow $1 stubdom_t:grant { copy };
diff --git a/policy/modules/xen/xen.te b/policy/modules/xen/xen.te
@@ -88,7 +88,7 @@ allow dom0_type xen_t:xen { kexec readapic writeapic mtrr_read mtrr_add mtrr_del
 
 # dom0 access to hvm guests
 allow dom0_type hvm_type:hvm { cacheattr getparam irqlevel pcilevel pciroute
-                               nested setparam hvmctl trackdirtyvram };
+                               nested setparam hvmctl trackdirtyvram send_irq };
 
 ########################################
 #

Original file line number	Diff line number	Diff line change
`@@ -88,7 +88,7 @@ allow dom0_type xen_t:xen { kexec readapic writeapic mtrr_read mtrr_add mtrr_del`
`88`	`88`
`89`	`89`	`# dom0 access to hvm guests`
`90`	`90`	`allow dom0_type hvm_type:hvm { cacheattr getparam irqlevel pcilevel pciroute`
`91`		`- nested setparam hvmctl trackdirtyvram };`
	`91`	`+ nested setparam hvmctl trackdirtyvram send_irq };`
`92`	`92`
`93`	`93`	`########################################`
`94`	`94`	`#`