Re: [RFC PATCH v2 00/13] SELinux support for Infiniband RDMA

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 4/11/2016 7:06 PM, Jason Gunthorpe wrote:
> On Mon, Apr 11, 2016 at 11:35:57PM +0000, Daniel Jurgens wrote:
> 
>> OK, I'll change idbev to ibendport and smi to qp0, or qpzero if the
>> SELinux user space code doesn't allow numbers in access vector identifiers.
> 
> Do you know why you'd want to access control qp0 but leave qp1 open?
> 
> Still seems kinda strange.
> 
> Jason
> 

The point is to restrict the ability to run an SM.  MADs go through PKey
enforcement as well.
--
To unsubscribe from this list: send the line "unsubscribe linux-rdma" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Photo]     [Yosemite News]     [Yosemite Photos]     [Linux Kernel]     [Linux SCSI]     [XFree86]
  Powered by Linux