diff options
| author | Daniel Jurgens | 2017-05-19 14:48:59 +0200 |
|---|---|---|
| committer | Paul Moore | 2017-05-23 18:28:12 +0200 |
| commit | 409dcf31538ae6ae96b3a0a1d3211e668bfefe8b (patch) | |
| tree | ee0e91fb5f99ad65bca29b34c4b6261f63405278 /security/selinux/include/objsec.h | |
| parent | selinux: Add IB Port SMP access vector (diff) | |
| download | kernel-qcow2-linux-409dcf31538ae6ae96b3a0a1d3211e668bfefe8b.tar.gz kernel-qcow2-linux-409dcf31538ae6ae96b3a0a1d3211e668bfefe8b.tar.xz kernel-qcow2-linux-409dcf31538ae6ae96b3a0a1d3211e668bfefe8b.zip | |
selinux: Add a cache for quicker retreival of PKey SIDs
It is likely that the SID for the same PKey will be requested many
times. To reduce the time to modify QPs and process MADs use a cache to
store PKey SIDs.
This code is heavily based on the "netif" and "netport" concept
originally developed by James Morris <jmorris@redhat.com> and Paul Moore
<paul@paul-moore.com> (see security/selinux/netif.c and
security/selinux/netport.c for more information)
Signed-off-by: Daniel Jurgens <danielj@mellanox.com>
Acked-by: Doug Ledford <dledford@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'security/selinux/include/objsec.h')
| -rw-r--r-- | security/selinux/include/objsec.h | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/security/selinux/include/objsec.h b/security/selinux/include/objsec.h index b7f15f7dc9af..6ebc61e370ff 100644 --- a/security/selinux/include/objsec.h +++ b/security/selinux/include/objsec.h @@ -144,6 +144,12 @@ struct ib_security_struct { u32 sid; /* SID of the queue pair or MAD agent */ }; +struct pkey_security_struct { + u64 subnet_prefix; /* Port subnet prefix */ + u16 pkey; /* PKey number */ + u32 sid; /* SID of pkey */ +}; + extern unsigned int selinux_checkreqprot; #endif /* _SELINUX_OBJSEC_H_ */ |