2017-10-09 15:53:46

by Konrad Rzeszutek Wilk

[permalink] [raw]
Subject: [refpolicy] [refpolicy SELinux PATCH 1/2] kernel/xen: Update for Xen 4.6

From: Konrad Rzeszutek Wilk <[email protected]>

libxenstored since git commit 9c89dc95201ffed5fead17b35754bf9440fdbdc0
prefers to use "/dev/xen/xenbus" over the "/proc/xen/xenbus".

Signed-off-by: Konrad Rzeszutek Wilk <[email protected]>
---
policy/modules/kernel/devices.fc | 1 +
1 file changed, 1 insertion(+)

diff --git a/policy/modules/kernel/devices.fc b/policy/modules/kernel/devices.fc
index f4093434b..e206720be 100644
--- a/policy/modules/kernel/devices.fc
+++ b/policy/modules/kernel/devices.fc
@@ -183,6 +183,7 @@ ifdef(`distro_suse', `
/dev/xen/gntdev -c gen_context(system_u:object_r:xen_device_t,s0)
/dev/xen/gntalloc -c gen_context(system_u:object_r:xen_device_t,s0)
/dev/xen/privcmd -c gen_context(system_u:object_r:xen_device_t,s0)
+/dev/xen/xenbus -c gen_context(system_u:object_r:xen_device_t,s0)

ifdef(`distro_debian',`
# this is a static /dev dir "backup mount"
--
2.13.3


2017-10-09 18:50:01

by Chris PeBenito

[permalink] [raw]
Subject: [refpolicy] [refpolicy SELinux PATCH 1/2] kernel/xen: Update for Xen 4.6

On 10/09/2017 11:53 AM, Konrad Rzeszutek Wilk via refpolicy wrote:
> From: Konrad Rzeszutek Wilk <[email protected]>
>
> libxenstored since git commit 9c89dc95201ffed5fead17b35754bf9440fdbdc0
> prefers to use "/dev/xen/xenbus" over the "/proc/xen/xenbus".
>
> Signed-off-by: Konrad Rzeszutek Wilk <[email protected]>
> ---
> policy/modules/kernel/devices.fc | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/policy/modules/kernel/devices.fc b/policy/modules/kernel/devices.fc
> index f4093434b..e206720be 100644
> --- a/policy/modules/kernel/devices.fc
> +++ b/policy/modules/kernel/devices.fc
> @@ -183,6 +183,7 @@ ifdef(`distro_suse', `
> /dev/xen/gntdev -c gen_context(system_u:object_r:xen_device_t,s0)
> /dev/xen/gntalloc -c gen_context(system_u:object_r:xen_device_t,s0)
> /dev/xen/privcmd -c gen_context(system_u:object_r:xen_device_t,s0)
> +/dev/xen/xenbus -c gen_context(system_u:object_r:xen_device_t,s0)
>
> ifdef(`distro_debian',`
> # this is a static /dev dir "backup mount"

Merged.

--
Chris PeBenito