Re: [Xen-devel] [PATCH] flask: Allow device model to raise PCI interrupts (pcilevel capability)

[Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>]

On 14/12/15 07:05, Ian Jackson wrote:
> Ian Campbell writes ("[PATCH] flask: Allow device model to raise PCI interrupts 
> (pcilevel capability)"):
> ...
> > -       allow $1 $2_target:hvm { getparam setparam trackdirtyvram hvmctl 
> > irqlevel pciroute cacheattr send_irq };
> > +       allow $1 $2_target:hvm { getparam setparam trackdirtyvram hvmctl 
> > irqlevel pciroute pcilevel cacheattr send_irq };
> Thanks for tracking this down.
>
> Based on xen/xsm/flask/policy/access_vectors this seems like a
> no-brainer.  Hopefully Daniel will agree :-).
>
> Acked-by: Ian Jackson <ian.jackson@xxxxxxxxxxxxx>
>
> Ian.
Yep, this change is obvious given the issue.  I didn't find any other
missing XSM_DM_PRIV accesses when I walked through them, so hopefully
this is the only one that wasn't correct.

Acked-by: Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel