Messages in this thread | | | Date | Thu, 8 Jul 2010 09:23:23 +1000 (EST) | From | James Morris <> | Subject | Re: [PATCH 04/10] SELinux: Add new labeling type native labels |
| |
On Wed, 7 Jul 2010, David P. Quigley wrote:
> There currently doesn't exist a labeling type that is adequate for use with > labeled NFS. Since NFS doesn't really support xattrs we can't use the use xattr > labeling behavior. For this we developed a new labeling type. The native > labeling type is used solely by NFS to ensure NFS inodes are labeled at runtime > by the NFS code instead of relying on the SELinux security server on the client > end.
It would be useful to have the ability to specify labeling behavior on a per-mount basis, with the default remaining as genfs.
Otherwise, this is a global policy decision which affects all NFSv4 mounts, right?
-- James Morris <jmorris@namei.org>
| |