]> git.baikalelectronics.ru Git - kernel.git/commit
IB/core: Only enforce security for InfiniBand
authorDaniel Jurgens <danielj@mellanox.com>
Wed, 29 Nov 2017 18:10:39 +0000 (20:10 +0200)
committerJason Gunthorpe <jgg@mellanox.com>
Fri, 1 Dec 2017 19:21:28 +0000 (12:21 -0700)
commit6a3998daba36261b243d7b853133e51fee32fe68
tree56706edba26991ea0522a77baef77b9eab64f7dc
parent060cf8a87c7e67723dc7c0e72747e9cf69dc4d21
IB/core: Only enforce security for InfiniBand

For now the only LSM security enforcement mechanism available is
specific to InfiniBand. Bypass enforcement for non-IB link types.

This fixes a regression where modify_qp fails for iWARP because
querying the PKEY returns -EINVAL.

Cc: Paul Moore <paul@paul-moore.com>
Cc: Don Dutile <ddutile@redhat.com>
Cc: stable@vger.kernel.org
Reported-by: Potnuri Bharat Teja <bharat@chelsio.com>
Fixes: eef9fe7e87c2("IB/core: Enforce PKey security on QPs")
Fixes: f8c893f38a3c("IB/core: Enforce security on management datagrams")
Signed-off-by: Daniel Jurgens <danielj@mellanox.com>
Reviewed-by: Parav Pandit <parav@mellanox.com>
Tested-by: Potnuri Bharat Teja <bharat@chelsio.com>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
drivers/infiniband/core/security.c