[prev in list] [next in list] [prev in thread] [next in thread] 

List:       linux-rdma
Subject:    Re: [PATCH v3 0/9] SELinux support for Infiniband RDMA
From:       Daniel Jurgens <danielj () mellanox ! com>
Date:       2016-08-30 19:10:12
Message-ID: VI1PR0501MB242974DEE5E0BF2FFE3A5DA0C4E00 () VI1PR0501MB2429 ! eurprd05 ! prod ! outlook ! com
[Download RAW message or body]

On 8/30/2016 1:56 PM, Jason Gunthorpe wrote:
> 
> Are subsystems usually SELinux enabled in such a piecemeal way?
> 
> Are you sure the 'partition' SELinux label should not be more general
> to cover more of the similar RDMA cases?
> 
> Jason
> 
In order to label something you have to be able to describe something unique about an \
instance of it, like a Subnet Prefix/PKey value pair.  What other thing could we \
label more generally to control access to a partition/VLAN?

--
To unsubscribe from this list: send the line "unsubscribe linux-rdma" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[prev in list] [next in list] [prev in thread] [next in thread]