Re: [PATCH v1 1/9] checkpolicy: Add support for ibpkeycon labels

2017-05-17 Thread Daniel Jurgens
On 5/16/2017 1:18 PM, Stephen Smalley wrote: > On Mon, 2017-05-15 at 23:42 +0300, Dan Jurgens wrote: >> From: Daniel Jurgens >> >> +if (subnet_prefix.s6_addr[2] || subnet_prefix.s6_addr[3]) { >> +yyerror("subnet prefix should be 0's in the low >> order 64 bits."); >> +r

Re: [PATCH v1 1/9] checkpolicy: Add support for ibpkeycon labels

2017-05-16 Thread Stephen Smalley
On Mon, 2017-05-15 at 23:42 +0300, Dan Jurgens wrote: > From: Daniel Jurgens > > Add checkpolicy support for scanning and parsing ibpkeycon labels. > Also > create a new ocontext for Infiniband Pkeys and define a new policydb > version for infiniband support. > > Signed-off-by: Daniel Jurgens >