Re: [Xen-devel] XSM denials with 4.7.0 RC1

2016-05-04 Thread Doug Goldstein
On 5/4/16 2:39 PM, Konrad Rzeszutek Wilk wrote: >> >> Well it turns out yes I was using a bad policy. I grabbed the policy >> updates from master and not from 4.7.0-rc1 when I merged them with my >> policy. So yes the above are incorrect and noise on my part. master >> wasn't (and still isn't) at t

Re: [Xen-devel] XSM denials with 4.7.0 RC1

2016-05-04 Thread Konrad Rzeszutek Wilk
> > Well it turns out yes I was using a bad policy. I grabbed the policy > updates from master and not from 4.7.0-rc1 when I merged them with my > policy. So yes the above are incorrect and noise on my part. master > wasn't (and still isn't) at the same point that 4.7.0-rc1 was at. > > > > >> (X

Re: [Xen-devel] XSM denials with 4.7.0 RC1

2016-05-04 Thread Doug Goldstein
On 5/4/16 12:20 PM, Daniel De Graaf wrote: > On 05/04/2016 09:52 AM, Doug Goldstein wrote: >> Hi all, >> >> Sometime after d4cd5a205973171475b8c63bc250c2803e0f51fa, I get the >> following denials for any domU that attempts to run "xl". In my >> situation my domU needs to run "xl devd" because its a

Re: [Xen-devel] XSM denials with 4.7.0 RC1

2016-05-04 Thread Daniel De Graaf
On 05/04/2016 09:52 AM, Doug Goldstein wrote: Hi all, Sometime after d4cd5a205973171475b8c63bc250c2803e0f51fa, I get the following denials for any domU that attempts to run "xl". In my situation my domU needs to run "xl devd" because its a driver domain. (XEN) avc: denied { xen_extraversion }

Re: [Xen-devel] XSM denials with 4.7.0 RC1

2016-05-04 Thread Konrad Rzeszutek Wilk
On Wed, May 04, 2016 at 03:05:38PM +0100, Wei Liu wrote: > CC Konrad and Ross > > On Wed, May 04, 2016 at 08:52:24AM -0500, Doug Goldstein wrote: > > Hi all, > > > > Sometime after d4cd5a205973171475b8c63bc250c2803e0f51fa, I get the > > following denials for any domU that attempts to run "xl". In

Re: [Xen-devel] XSM denials with 4.7.0 RC1

2016-05-04 Thread Wei Liu
CC Konrad and Ross On Wed, May 04, 2016 at 08:52:24AM -0500, Doug Goldstein wrote: > Hi all, > > Sometime after d4cd5a205973171475b8c63bc250c2803e0f51fa, I get the > following denials for any domU that attempts to run "xl". In my > situation my domU needs to run "xl devd" because its a driver dom

Re: [Xen-devel] XSM denials with 4.7.0 RC1

2016-05-04 Thread Doug Goldstein
On 5/4/16 8:58 AM, Jan Beulich wrote: On 04.05.16 at 15:52, wrote: >> Hi all, >> >> Sometime after d4cd5a205973171475b8c63bc250c2803e0f51fa, I get the >> following denials for any domU that attempts to run "xl". In my >> situation my domU needs to run "xl devd" because its a driver domain. >>

Re: [Xen-devel] XSM denials with 4.7.0 RC1

2016-05-04 Thread Jan Beulich
>>> On 04.05.16 at 15:52, wrote: > Hi all, > > Sometime after d4cd5a205973171475b8c63bc250c2803e0f51fa, I get the > following denials for any domU that attempts to run "xl". In my > situation my domU needs to run "xl devd" because its a driver domain. > > (XEN) avc: denied { xen_extraversion }