On Fri, 19 May 2017, Dan Jurgens wrote: > From: Daniel Jurgens <dani...@mellanox.com> > > Add a generic notificaiton mechanism in the LSM. Interested consumers > can register a callback with the LSM and security modules can produce > events. > > Because access to Infiniband QPs are enforced in the setup phase of a > connection security should be enforced again if the policy changes. > Register infiniband devices for policy change notification and check all > QPs on that device when the notification is received. > > Add a call to the notification mechanism from SELinux when the AVC > cache changes or setenforce is cleared. > > Signed-off-by: Daniel Jurgens <dani...@mellanox.com>
Acked-by: James Morris <james.l.mor...@oracle.com> -- James Morris <jmor...@namei.org>
