[lkml]   [2004]   [Feb]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH] (2/3) SELinux context mount support - NFS
    On Wed, 2004-02-04 at 10:46, Christoph Hellwig wrote:
    > On Wed, Feb 04, 2004 at 10:31:51AM -0500, James Morris wrote:
    > > This patch modifies the kernel's NFS mount data structure to include
    > > SELinux context mount data. It allows NFS fileystems to be labeled on a
    > > per-mountpoint basis, and should not affect existing versions of
    > > userspace mount.
    > Wouldn't it better to integrate the NFS xattr code that SGI released under
    > the GPL (it's IRIX, not linux code unfortunately)

    That won't help with the case where the NFS server doesn't support the
    protocol extensions for xattr or where the NFS client doesn't want to
    trust contexts provided by the server. There is work in progress to add
    support for passing process and file contexts on NFS requests/replies,
    but that won't eliminate the need for this functionality for unmodified
    or untrusted NFS servers.

    Stephen Smalley <>
    National Security Agency

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 14:00    [W:0.020 / U:3.220 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site