To support access control for InfiniBand (IB) partitions and subnet management, security contexts are provided for: Partition Keys (Pkey) that are 16 bit numbers assigned to subnets and their IB end ports. An overview of the SELinux IB implementation can be found at: http://marc.info/?l=selinux&m=149519833917911&w=2.
Label IB partition keys. This may be a single key or a range.
Statement definition:
(ibpkeycon subnet pkey|(pkey_low pkey_high) context_id)
Where:
Example:
An anonymous context for a partition key range of 0x0-0x10 assigned to an IPv6 subnet:
(ibpkeycon fe80:: (0 0x10) (system_u system_r kernel_t (low (s3 (cats01 cats02)))))
Label IB end ports.
Statement definition:
(ibendportcon device_id port context_id)
Where:
Example:
A named context for device mlx5_0 on port 1:
(ibendportcon mlx5_0 1 system_u_bin_t_l2h)