]> git.baikalelectronics.ru Git - kernel.git/commit
IB/core: Only enforce security for InfiniBand
authorDaniel Jurgens <danielj@mellanox.com>
Wed, 29 Nov 2017 18:10:39 +0000 (20:10 +0200)
committerJason Gunthorpe <jgg@mellanox.com>
Fri, 1 Dec 2017 19:21:28 +0000 (12:21 -0700)
commitedd002d3691b6d04d57257c33c49cb8a7d11b898
tree56706edba26991ea0522a77baef77b9eab64f7dc
parentc298b1077c353bb0fbd7f4429d443c6bda3463aa
IB/core: Only enforce security for InfiniBand

For now the only LSM security enforcement mechanism available is
specific to InfiniBand. Bypass enforcement for non-IB link types.

This fixes a regression where modify_qp fails for iWARP because
querying the PKEY returns -EINVAL.

Cc: Paul Moore <paul@paul-moore.com>
Cc: Don Dutile <ddutile@redhat.com>
Cc: stable@vger.kernel.org
Reported-by: Potnuri Bharat Teja <bharat@chelsio.com>
Fixes: 1dd9fd747a0d("IB/core: Enforce PKey security on QPs")
Fixes: eeda37aa2c85("IB/core: Enforce security on management datagrams")
Signed-off-by: Daniel Jurgens <danielj@mellanox.com>
Reviewed-by: Parav Pandit <parav@mellanox.com>
Tested-by: Potnuri Bharat Teja <bharat@chelsio.com>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
drivers/infiniband/core/security.c