From 856041c48448376d80fa3132076317de49a17214 Mon Sep 17 00:00:00 2001 From: mahantesh Date: Wed, 4 Oct 2017 15:42:56 -0400 Subject: [PATCH] Allow dom0 to copy uivm grants With blktap3, pv-guest disk writes trigger grant copies. This is needed because uivm has a read-write disk (gconf). Signed-off-by: mahantesh --- policy/modules/xen/uivm.te | 1 + 1 file changed, 1 insertion(+) diff --git a/policy/modules/xen/uivm.te b/policy/modules/xen/uivm.te index 941379f..51adc82 100644 --- a/policy/modules/xen/uivm.te +++ b/policy/modules/xen/uivm.te @@ -44,3 +44,4 @@ dom0_send_v4v(uivm_t) ndvm_send_v4v(uivm_t) iomem_map_read_mmu(uivm_t) xen_write_console(uivm_t) +dom0_copy_grant(uivm_t)