> Former (multicast modifications of fabric) also requires restricting
> arbitrary UD QPs as well as QP1 as SA access is QPn (n > 0) <-> QP1.

The SA could have an option to ignore all requests that do not originate QP1, 
then protect access to QP1 on the client nodes.

_______________________________________________
Selinux mailing list
[email protected]
To unsubscribe, send email to [email protected].
To get help, send an email containing "help" to [email protected].

Reply via email to