From mboxrd@z Thu Jan 1 00:00:00 1970 From: Paul Moore Subject: Re: [PATCH v3 0/9] SELinux support for Infiniband RDMA Date: Tue, 20 Sep 2016 19:43:34 -0400 Message-ID: References: <20160830074607.GN594@leon.nu> <20160830184633.GE7586@obsidianresearch.com> <20160830185548.GA9768@obsidianresearch.com> <20160901163418.GA6479@obsidianresearch.com> <20160906200221.GE28416@obsidianresearch.com> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Return-path: In-Reply-To: <20160906200221.GE28416@obsidianresearch.com> Sender: owner-linux-security-module@vger.kernel.org To: Jason Gunthorpe , Daniel Jurgens Cc: Leon Romanovsky , "chrisw@sous-sol.org" , Stephen Smalley , Eric Paris , "dledford@redhat.com" , "sean.hefty@intel.com" , "hal.rosenstock@gmail.com" , "selinux@tycho.nsa.gov" , "linux-security-module@vger.kernel.org" , "linux-rdma@vger.kernel.org" , Yevgeny Petrilin List-Id: linux-rdma@vger.kernel.org On Tue, Sep 6, 2016 at 4:02 PM, Jason Gunthorpe wrote: > On Thu, Sep 01, 2016 at 02:06:46PM -0400, Paul Moore wrote: > >> Jason and/or Daniel, I think it would be helpful if you could explain >> both the InifiniBand and IP based approaches for those of us who know >> SELinux, but not necessarily the RDMA and InfiniBand portions of this >> discussion. Be verbose and explain it as if we were idiots (I get >> called that enough, it must be true). > > Well, I'm not really familiar with SELinux, I know a little bit about > how labels are applied in the netstack, but not that much... > > The RDMA subsystem supports 4 different networking standards, and they > each have their own objects.. All right, I'm done traveling for a bit and it seems like this discussion has settled into a stalemate so let's try to pick things back up and sort this out. Starting we a better RDMA education for me. So far the discussion has been around providing access controls at the transport layer, are there any RDMA entities that are transport agnostic that might be better suited for what we are trying to do? Or is it simply that the RDMA layer is tied so tightly to the underlying transport that we can't separate the two and have to consider them as one? -- paul moore www.paul-moore.com