xen/flask: Wire up missing hypercalls

[for-4.20][PATCH 0/3] xen/flask: Wire up missing hypercalls

Michal Orzel posted 3 patches 9 months, 4 weeks ago

Download series mbox

Patches applied successfully (tree, apply log)
git fetch https://gitlab.com/xen-project/patchew/xen tags/patchew/20250107092719.26401-1-michal.orzel@amd.com

tools/flask/policy/modules/dom0.te  | 2 +-
tools/flask/policy/modules/xen.if   | 4 ++--
xen/xsm/flask/hooks.c               | 9 +++++++++
xen/xsm/flask/policy/access_vectors | 6 ++++++
4 files changed, 18 insertions(+), 3 deletions(-)

Expand all Fold all

[for-4.20][PATCH 0/3] xen/flask: Wire up missing hypercalls

Posted by Michal Orzel 9 months, 4 weeks ago

It's been noted by Juergen that recently added XEN_DOMCTL_set_llc_colors
is not wired up in FLASK. While preparing a fix, I noticed two other Arm
hypercalls from the past that were missing the linking as well. These two
are latent bugs while the LLC one is a release blocker for 4.20.

Michal Orzel (3):
  xen/flask: Wire up XEN_DOMCTL_vuart_op
  xen/flask: Wire up XEN_DOMCTL_dt_overlay
  xen/flask: Wire up XEN_DOMCTL_set_llc_colors

 tools/flask/policy/modules/dom0.te  | 2 +-
 tools/flask/policy/modules/xen.if   | 4 ++--
 xen/xsm/flask/hooks.c               | 9 +++++++++
 xen/xsm/flask/policy/access_vectors | 6 ++++++
 4 files changed, 18 insertions(+), 3 deletions(-)

-- 
2.25.1

Re: [for-4.20][PATCH 0/3] xen/flask: Wire up missing hypercalls

Posted by Oleksii Kurochko 9 months, 4 weeks ago

Hi Michal,

On 1/7/25 10:27 AM, Michal Orzel wrote:
> It's been noted by Juergen that recently added XEN_DOMCTL_set_llc_colors
> is not wired up in FLASK. While preparing a fix, I noticed two other Arm
> hypercalls from the past that were missing the linking as well. These two
> are latent bugs while the LLC one is a release blocker for 4.20.

Release-Acked-By: Oleksii Kurochko <oleksii.kurochko@gmail.com>


Thanks.


~ Oleksii

>
> Michal Orzel (3):
>    xen/flask: Wire up XEN_DOMCTL_vuart_op
>    xen/flask: Wire up XEN_DOMCTL_dt_overlay
>    xen/flask: Wire up XEN_DOMCTL_set_llc_colors
>
>   tools/flask/policy/modules/dom0.te  | 2 +-
>   tools/flask/policy/modules/xen.if   | 4 ++--
>   xen/xsm/flask/hooks.c               | 9 +++++++++
>   xen/xsm/flask/policy/access_vectors | 6 ++++++
>   4 files changed, 18 insertions(+), 3 deletions(-)
>