On 07/13/2016 08:59 AM, Anshul Makkar wrote:
Access to setpodtarget is required by dom0 to set the balloon targets for domU. The patch gives source domain (dom0) access to set this target for domU and resolve the following permission denied error message during ballooning : avc: denied { setpodtarget } for domid=0 target=9 scontext=system_u:system_r:dom0_t tcontext=system_u:system_r:domU_t tclass=domainSigned-off-by: Anshul Makkar <anshul.mak...@citrix.com>
This seems to indicate that getpodtarget should also be added to the list. Either as-is or with getpodtarget also added, Acked-by: Daniel De Graaf <dgde...@tycho.nsa.gov> _______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org https://lists.xen.org/xen-devel
