IB/core: Only enforce security for InfiniBand
authorDaniel Jurgens <danielj@mellanox.com>
Wed, 29 Nov 2017 18:10:39 +0000 (20:10 +0200)
committerJason Gunthorpe <jgg@mellanox.com>
Fri, 1 Dec 2017 19:21:28 +0000 (12:21 -0700)
commit315d160c5a4e034a576a13aa21e7235d5c9ec609
tree56706edba26991ea0522a77baef77b9eab64f7dc
parent378efe798ecf0e7d9730a595ef3419b046e34fb4
IB/core: Only enforce security for InfiniBand

For now the only LSM security enforcement mechanism available is
specific to InfiniBand. Bypass enforcement for non-IB link types.

This fixes a regression where modify_qp fails for iWARP because
querying the PKEY returns -EINVAL.

Cc: Paul Moore <paul@paul-moore.com>
Cc: Don Dutile <ddutile@redhat.com>
Cc: stable@vger.kernel.org
Reported-by: Potnuri Bharat Teja <bharat@chelsio.com>
Fixes: d291f1a65232("IB/core: Enforce PKey security on QPs")
Fixes: 47a2b338fe63("IB/core: Enforce security on management datagrams")
Signed-off-by: Daniel Jurgens <danielj@mellanox.com>
Reviewed-by: Parav Pandit <parav@mellanox.com>
Tested-by: Potnuri Bharat Teja <bharat@chelsio.com>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>
drivers/infiniband/core/security.c