From: danielj@mellanox.com (Daniel Jurgens) Date: Wed, 24 May 2017 14:24:51 +0000 Subject: [refpolicy] [PATCH v1 1/1] refpolicy: Infiniband pkeys and endports References: <1495550661-1518-1-git-send-email-danielj@mellanox.com> <45d60463-1c36-38d9-022c-86f0bd3fcb04@ieee.org> Message-ID: To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 5/23/2017 7:28 PM, Chris PeBenito wrote: > On 05/23/2017 10:44 AM, Dan Jurgens wrote: >> From: Daniel Jurgens >> >> >> +# Infiniband >> +optional_policy(` >> + corenet_ib_access_all_pkeys(corenet_unconfined_type) >> + corenet_ib_manage_subnet_all_endports(corenet_unconfined_type) >> + corenet_ib_access_unlabeled_pkeys(corenet_unconfined_type) >> + corenet_ib_manage_subnet_unlabeled_endports(corenet_unconfined_type) >> +') > This shouldn't be optional, as this is referencing its own module, so it > will always be included. The corenet_ib_* calls below don't need to be > optional either as corenet is required for all policies. > Addressed, v2 sent.