lkml.org 
[lkml]   [2010]   [Jul]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 04/10] SELinux: Add new labeling type native labels
    On Wed, 7 Jul 2010, David P. Quigley wrote:

    > There currently doesn't exist a labeling type that is adequate for use with
    > labeled NFS. Since NFS doesn't really support xattrs we can't use the use xattr
    > labeling behavior. For this we developed a new labeling type. The native
    > labeling type is used solely by NFS to ensure NFS inodes are labeled at runtime
    > by the NFS code instead of relying on the SELinux security server on the client
    > end.

    It would be useful to have the ability to specify labeling behavior on a
    per-mount basis, with the default remaining as genfs.

    Otherwise, this is a global policy decision which affects all NFSv4
    mounts, right?


    --
    James Morris
    <jmorris@namei.org>


    \
     
     \ /
      Last update: 2010-07-08 01:25    [W:3.389 / U:0.004 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site