From: danielj@mellanox.com (Daniel Jurgens) Date: Wed, 22 Nov 2017 09:43:39 -0600 Subject: [refpolicy] [Regression bug] Can't control IPoIB VLAN interfaces if selinux enabled In-Reply-To: <20171122152548.GA19429@dhcp-13-42.nay.redhat.com> References: <20171122120336.GA11241@dhcp-13-42.nay.redhat.com> <20171122152548.GA19429@dhcp-13-42.nay.redhat.com> Message-ID: To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 11/22/2017 9:25 AM, Honggang LI wrote: > On Wed, Nov 22, 2017 at 07:43:36AM -0600, Daniel Jurgens wrote: >> Upstream refpolicy has a patch that allow access to unlabeled PKeys, is it applied in your policy? Even if it is there could additional distro specific changes required, for the unconfined user for example. > Yes, this policy has been applied. > >> https://github.com/TresysTechnology/refpolicy/commit/25a5b2427447eb14edb07ce302217d37528813bc >> >> Apologies if this link is converted into a monstrosity to a Microsoft proxy. It will take you to github. Can you send the audit log?