Re: kernel space iWARP broken with CONFIG_SECURITY_INFINIBAND enabled

[Potnuri Bharat Teja <bharat-ut6Up61K2wZBDgjK7y7TUQ@public.gmane.org>]

On Wednesday, November 11/15/17, 2017 at 23:51:08 +0530, Daniel Jurgens wrote:
> On 11/15/2017 7:15 AM, Potnuri Bharat Teja wrote:
> > Hi all,
> > With CONFIG_SECURITY_INFINIBAND kernel config option enabled iWARP kernel 
> > space applications are failing at rdma_create_qp(). Apparantly SELinux 
> > support for Infiniband RDMA caused this regression.
> >
> > Here is the failure with NVMEof discovery:
> > [  129.294943] nvme nvme0: rdma_resolve_addr wait failed (-22).
> >
> > Failure is at ib_get_cached_pkey(), for invalid pkey_index, called by the 
> > following call chain: 
> > rdma_create_qp()-> cma_init_conn_qp()-> ib_modify_qp()-> 
> > ib_security_modify_qp()-> check_qp_port_pkey_settings()-> 
> > get_pkey_and_subnet_prefix()
> >
> > SELinux support for Infiniband RDMA:
> > https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.spinics.net%2Flists%2Flinux-rdma%2Fmsg38705.html&data=02%7C01%7Cdanielj%40mellanox.com%7C562dfe4029994b668c8808d52c2af77a%7Ca652971c7d2e4d9ba6a4d149256f461b%7C0%7C0%7C636463485413049982&sdata=zjyS9aC9I2vRRxPyrIeLmCAl0Cg3cNJS7Tfz96Fzl%2F4%3D&reserved=0
> >
> > I am trying to understand how IB security enforcing works with iWARP. 
> > From the commit messages these appears to be an IB specific changes.
> > If true, how is iw_cm supposed to handle it?
> > iWARP doesn't use or have partition keys (pkey), How is this handled by the 
> > IB security enforcing changes?
> >
> > Thanks,
> > Bharat.
> >  
> 
> Thanks Bharat, would you mind testing a patch for me? I don't have any iWARP hardware. I'll send to you it by EOB today.
Thanks for the quick patch Daniel.
Tested the patch for iwarp and it fixes the regression.
I think this should be marked for stable as well.

Thanks,
Bharat.



 
--
To unsubscribe from this list: send the line "unsubscribe linux-rdma" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html