Re: [RFC PATCH 0/7] SELinux support for Infiniband RDMA

James Morris
2016-04-05T01:55:10Z

On Tue, 5 Apr 2016, Daniel Jurgens wrote:

> On 4/4/2016 8:13 PM, James Morris wrote:
> > On Tue, 5 Apr 2016, Dan Jurgens wrote:
> >
> >> From: Daniel Jurgens <danielj-VPRAkNaXOzVWk0Htik3J/w@public.gmane.org>
> >>
> >> Currently there is no way to provide granular access control to an Infiniband
> >> fabric. By providing an ability to restrict user access to specific virtual
> >> subfabrics administrators can limit access to bandwidth and isolate users on
> >> the fabric.
> >
> > Where are the LSM hooks placed?
> >
> >
> >
> The LSM hooks are defined in patch 1/7 of this series. There are 4 that
> will be called from ib_core, and one that's implemented by ib_core to be
> called by a security module if the policy or enforcement setting change
> (infiniband_flush). That call from SELinux is added in patch 3/7 of
> this series.

Can you post the ib_core patches, too?

--
James Morris
<jmorris-gx6/JNMH7DfYtjvyW6yDsg@public.gmane.org>

_______________________________________________
Selinux mailing list
Selinux-+05T5uksL2qpZYMLLGbcSA@public.gmane.org
To unsubscribe, send email to Selinux-leave-+05T5uksL2pAGbPMOrvdOA@public.gmane.org
To get help, send an email containing "help" to Selinux-request-+05T5uksL2pAGbPMOrvdOA@public.gmane.org