[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] [PATCH] xsm: allow relevant permission during migrate and gpu-passthrough.


  • To: Anshul Makkar <anshul.makkar@xxxxxxxxxx>, xen-devel@xxxxxxxxxxxxx
  • From: Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>
  • Date: Wed, 14 Dec 2016 16:09:00 -0500
  • Cc: ian.jackson@xxxxxxxxxxxxx, wei.liu2@xxxxxxxxxx
  • Delivery-date: Wed, 14 Dec 2016 21:09:32 +0000
  • Ironport-phdr: 9a23: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
  • List-id: Xen developer discussion <xen-devel.lists.xen.org>

On 12/12/2016 09:00 AM, Anshul Makkar wrote:
During guest migrate allow permission to prevent
spurious page faults.
Prevents these errors:
d73: Non-privileged (73) attempt to map I/O space 00000000

avc: denied  { set_misc_info } for domid=0 target=11
scontext=system_u:system_r:dom0_t
tcontext=system_u:system_r:domU_t tclass=domain

GPU passthrough for hvm guest:
avc:  denied  { send_irq } for domid=0 target=10
scontext=system_u:system_r:dom0_t
tcontext=system_u:system_r:domU_t tclass=hvm

Signed-off-by: Anshul Makkar <anshul.makkar@xxxxxxxxxx>

Acked-by: Daniel De Graaf <dgdegra@xxxxxxxxxxxxx>


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
https://lists.xen.org/xen-devel

 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.