diff options
| author | Andrew Cooper <andrew.cooper3@citrix.com> | 2018-02-27 17:39:37 +0000 |
|---|---|---|
| committer | Andrew Cooper <andrew.cooper3@citrix.com> | 2018-08-15 19:40:28 +0100 |
| commit | 4a83497635056d33fe20ef705f35617b1003a276 (patch) | |
| tree | 341ed7db55b860deb0700097f49ae5f8b8ad9132 /tools/flask | |
| parent | 54ed251dc7b85565820019102e533afcea814e16 (diff) | |
| download | xen-4a83497635056d33fe20ef705f35617b1003a276.tar.gz | |
xen/domctl: Merge set_max_evtchn into createdomain
set_max_evtchn is somewhat weird. It was introduced with the event_fifo work,
but has never been used. Still, it is a bounding on resources consumed by the
event channel infrastructure, and should be part of createdomain, rather than
editable after the fact.
Drop XEN_DOMCTL_set_max_evtchn completely (including XSM hooks and libxc
wrappers), and retain the functionality in XEN_DOMCTL_createdomain.
Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
Acked-by: Christian Lindig <christian.lindig@citrix.com>
Acked-by: Wei Liu <wei.liu2@citrix.com>
Reviewed-by: Roger Pau Monné <roger.pau@citrix.com>
Diffstat (limited to 'tools/flask')
| -rw-r--r-- | tools/flask/policy/modules/dom0.te | 2 | ||||
| -rw-r--r-- | tools/flask/policy/modules/xen.if | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/tools/flask/policy/modules/dom0.te b/tools/flask/policy/modules/dom0.te index bf794d9bdd..4eb3843d52 100644 --- a/tools/flask/policy/modules/dom0.te +++ b/tools/flask/policy/modules/dom0.te @@ -38,7 +38,7 @@ allow dom0_t dom0_t:domain { getpodtarget setpodtarget set_misc_info set_virq_handler }; allow dom0_t dom0_t:domain2 { - set_cpuid gettsc settsc setscheduler set_max_evtchn set_vnumainfo + set_cpuid gettsc settsc setscheduler set_vnumainfo get_vnumainfo psr_cmt_op psr_alloc set_gnttab_limits }; allow dom0_t dom0_t:resource { add remove }; diff --git a/tools/flask/policy/modules/xen.if b/tools/flask/policy/modules/xen.if index 7aefd0061e..61b0e76715 100644 --- a/tools/flask/policy/modules/xen.if +++ b/tools/flask/policy/modules/xen.if @@ -51,7 +51,7 @@ define(`create_domain_common', ` getvcpuinfo getaddrsize getaffinity setaffinity settime setdomainhandle getvcpucontext set_misc_info }; allow $1 $2:domain2 { set_cpuid settsc setscheduler setclaim - set_max_evtchn set_vnumainfo get_vnumainfo cacheflush + set_vnumainfo get_vnumainfo cacheflush psr_cmt_op psr_alloc soft_reset set_gnttab_limits resource_map }; allow $1 $2:security check_context; |