On 11/22/2017 9:25 AM, Honggang LI wrote: > On Wed, Nov 22, 2017 at 07:43:36AM -0600, Daniel Jurgens wrote: >> Upstream refpolicy has a patch that allow access to unlabeled PKeys, is it applied in your policy? Even if it is there could additional distro specific changes required, for the unconfined user for example. > Yes, this policy has been applied. > >> https://github.com/TresysTechnology/refpolicy/commit/25a5b2427447eb14edb07ce302217d37528813bc >> >> Apologies if this link is converted into a monstrosity to a Microsoft proxy. It will take you to github. Can you send the audit log? -- To unsubscribe from this list: send the line "unsubscribe linux-rdma" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html