From: Daniel Jurgens <danielj@xxxxxxxxxxxx>
Register the callback at init and unregister it at cleanup.
When called walk the device list and call ib_security_cache_change for
each port on each device.
Signed-off-by: Daniel Jurgens <danielj@xxxxxxxxxxxx>
Reviewed-by: Eli Cohen <eli@xxxxxxxxxxxx>
Reviewed-by: Leon Romanovsky <leonro@xxxxxxxxxxxx>
---
drivers/infiniband/core/device.c | 26 ++++++++++++++++++++++++++
1 file changed, 26 insertions(+)
diff --git a/drivers/infiniband/core/device.c b/drivers/infiniband/core/device.c
index 63deb5c..5060a7f 100644
--- a/drivers/infiniband/core/device.c
+++ b/drivers/infiniband/core/device.c
@@ -335,6 +335,29 @@ static int setup_port_pkey_list(struct ib_device *device)
return 0;
}
+static void ib_security_flush(void)
+{
+ struct ib_device *dev;
+
+ down_read(&lists_rwsem);
+ list_for_each_entry(dev, &device_list, core_list) {
+ int i;
+
+ for (i = rdma_start_port(dev); i <= rdma_end_port(dev); i++) {
+ u64 sp;
+ int ret = ib_get_cached_subnet_prefix(dev,
+ i,
+ &sp);
+
+ WARN_ONCE(ret,
+ "ib_get_cached_subnet_prefix err: %d, this should never happen here\n",
+ ret);
+ ib_security_cache_change(dev, i, sp);
+ }
+ }
+ up_read(&lists_rwsem);
+}
+
/**
* ib_register_device - Register an IB device with IB core
* @device:Device to register
@@ -1062,6 +1085,8 @@ static int __init ib_core_init(void)
goto err_sa;
}
+ security_register_ib_flush_callback(&ib_security_flush);
+
ib_cache_setup();
return 0;
@@ -1085,6 +1110,7 @@ err:
static void __exit ib_core_cleanup(void)
{
+ security_unregister_ib_flush_callback();
ib_cache_cleanup();
ib_remove_ibnl_clients();
ib_sa_cleanup();
--
1.8.3.1
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
