On Mon, Oct 30, 2017 at 09:09:52PM +0200, Leon Romanovsky wrote: > However, I don't think that kernel to libibverbs API should follow the > same path. The centralized entry points to the kernel provides better > enforcement and minimizes system call bloat. How so? I didn't think selinux intersected with the CQs at all.. I've never worried about the # of verbs entries, we have so many already. I also don't like the modify semantic, because IMHO, modify should mirror create, and we don't specify the moderation parameters during create. Jason -- To unsubscribe from this list: send the line "unsubscribe linux-rdma" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html