Add missing policy rule needed on systems with strict resource limits, add another missing rule to reduce AVC noise, and simplify how IB tests are activated. Tested on an aarch64 machine with an IB device and RHEL-8.7 installed. Ondrej Mosnacek (3): policy: make sure test_ibpkey_access_t can lock enough memory policy: allow test_ibpkey_access_t to use RDMA netlink sockets tests/infiniband*: simplify test activation Vagrantfile | 1 + policy/test_ibpkey.te | 3 +++ tests/Makefile | 11 ++------- tests/infiniband_endport/test | 39 ++++++++++++++++++------------- tests/infiniband_pkey/test | 44 ++++++++++++++++++++--------------- 5 files changed, 54 insertions(+), 44 deletions(-) -- 2.39.2
