Re: [Xen-devel] [PATCH] flask: Allow initial domain to use XENPF_get_symbol

2015-10-06 Thread Konrad Rzeszutek Wilk
On October 6, 2015 10:59:21 AM EDT, Jan Beulich wrote: On 06.10.15 at 16:52, wrote: >> Daniel De Graaf writes ("Re: [PATCH] flask: Allow initial domain to >use >> XENPF_get_symbol"): >>> On 05/10/15 11:16, Konrad Rzeszutek Wilk wrote: >>> > It looks to be missing in the policy file for the

Re: [Xen-devel] [PATCH] flask: Allow initial domain to use XENPF_get_symbol

2015-10-06 Thread Jan Beulich
>>> On 06.10.15 at 16:52, wrote: > Daniel De Graaf writes ("Re: [PATCH] flask: Allow initial domain to use > XENPF_get_symbol"): >> On 05/10/15 11:16, Konrad Rzeszutek Wilk wrote: >> > It looks to be missing in the policy file for the initial >> > domain. Eventually we may want to extend this acc

Re: [Xen-devel] [PATCH] flask: Allow initial domain to use XENPF_get_symbol

2015-10-06 Thread Ian Jackson
Daniel De Graaf writes ("Re: [PATCH] flask: Allow initial domain to use XENPF_get_symbol"): > On 05/10/15 11:16, Konrad Rzeszutek Wilk wrote: > > It looks to be missing in the policy file for the initial > > domain. Eventually we may want to extend this access to > > non-dom0 domains but for now i

Re: [Xen-devel] [PATCH] flask: Allow initial domain to use XENPF_get_symbol

2015-10-05 Thread Daniel De Graaf
On 05/10/15 11:16, Konrad Rzeszutek Wilk wrote: It looks to be missing in the policy file for the initial domain. Eventually we may want to extend this access to non-dom0 domains but for now it certainly dom0-only. Reviewed-by: Boris Ostrovsky Signed-off-by: Konrad Rzeszutek Wilk Acked-by: D

[Xen-devel] [PATCH] flask: Allow initial domain to use XENPF_get_symbol

2015-10-05 Thread Konrad Rzeszutek Wilk
It looks to be missing in the policy file for the initial domain. Eventually we may want to extend this access to non-dom0 domains but for now it certainly dom0-only. Reviewed-by: Boris Ostrovsky Signed-off-by: Konrad Rzeszutek Wilk --- tools/flask/policy/policy/modules/xen/xen.te | 1 + 1 file