diff options
| author | Daniel De Graaf <dgdegra@tycho.nsa.gov> | 2014-11-27 14:04:23 +0100 |
|---|---|---|
| committer | Jan Beulich <jbeulich@suse.com> | 2014-11-27 14:04:23 +0100 |
| commit | ac16e70b2648ee782fb084c73ee63804209498fd (patch) | |
| tree | 587053797f0b27f8d908610812d3656e44b07d5a | |
| parent | 712a8222302c6bd5221c2fbd03aedac18e4422ca (diff) | |
xsm/flask: add two missing domctls
Reported-by: Michael Young <m.a.young@durham.ac.uk>
Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
Release-Acked-by: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>
| -rw-r--r-- | xen/xsm/flask/hooks.c | 2 | ||||
| -rw-r--r-- | xen/xsm/flask/policy/access_vectors | 2 |
2 files changed, 4 insertions, 0 deletions
diff --git a/xen/xsm/flask/hooks.c b/xen/xsm/flask/hooks.c index 0ba2ce90c1..d48463ffb8 100644 --- a/xen/xsm/flask/hooks.c +++ b/xen/xsm/flask/hooks.c @@ -672,9 +672,11 @@ static int flask_domctl(struct domain *d, int cmd) return current_has_perm(d, SECCLASS_HVM, HVM__CACHEATTR); case XEN_DOMCTL_set_ext_vcpucontext: + case XEN_DOMCTL_set_vcpu_msrs: return current_has_perm(d, SECCLASS_DOMAIN, DOMAIN__SETEXTVCPUCONTEXT); case XEN_DOMCTL_get_ext_vcpucontext: + case XEN_DOMCTL_get_vcpu_msrs: return current_has_perm(d, SECCLASS_DOMAIN, DOMAIN__GETEXTVCPUCONTEXT); case XEN_DOMCTL_setvcpuextstate: diff --git a/xen/xsm/flask/policy/access_vectors b/xen/xsm/flask/policy/access_vectors index 1cd451e4c7..1da9f63682 100644 --- a/xen/xsm/flask/policy/access_vectors +++ b/xen/xsm/flask/policy/access_vectors @@ -151,8 +151,10 @@ class domain # XEN_DOMCTL_sendtrigger trigger # XEN_DOMCTL_get_ext_vcpucontext +# XEN_DOMCTL_set_vcpu_msrs getextvcpucontext # XEN_DOMCTL_set_ext_vcpucontext +# XEN_DOMCTL_get_vcpu_msrs setextvcpucontext # XEN_DOMCTL_getvcpuextstate getvcpuextstate |