2017-05-24 14:24:51

by Daniel Jurgens

[permalink] [raw]
Subject: [refpolicy] [PATCH v1 1/1] refpolicy: Infiniband pkeys and endports

On 5/23/2017 7:28 PM, Chris PeBenito wrote:
> On 05/23/2017 10:44 AM, Dan Jurgens wrote:
>> From: Daniel Jurgens <[email protected]>
>>
>>
>> +# Infiniband
>> +optional_policy(`
>> + corenet_ib_access_all_pkeys(corenet_unconfined_type)
>> + corenet_ib_manage_subnet_all_endports(corenet_unconfined_type)
>> + corenet_ib_access_unlabeled_pkeys(corenet_unconfined_type)
>> + corenet_ib_manage_subnet_unlabeled_endports(corenet_unconfined_type)
>> +')
> This shouldn't be optional, as this is referencing its own module, so it
> will always be included. The corenet_ib_* calls below don't need to be
> optional either as corenet is required for all policies.
>
Addressed, v2 sent.