Re: [PATCH 00/13] lnfs: linux-3.10-rc1 release

["J. Bruce Fields" <bfields@fieldses.org>]

On Mon, May 13, 2013 at 03:11:44PM -0400, Steve Dickson wrote:
> From: Steve Dickson <steved@redhat.com>
> 
> Here is an the next rlease of the label NFS patches
> ported to the linux-3-10.rc1 release. 
> 
> Note, this release only include the security and 
> NFS client patches since the server patches have 
> already been merged into Bruce's tree...

Actually, not completely--I was waiting to hear they'd gotten some
testing from you:

> I did uses those patches to test the release. 

So, I'll push them out now, thanks!

--b.

> 
> Bruce, thank you very much for all you help! 
> 
> There were no functional changes in the security 
> patches. There were some simple merge conflicts 
> in a couple header files. 
> 
> The following has was changed in the client code
> 
> * Labels were taken out of the cache consistency 
>   bitmask. The means the ACCESS and DELEGRETURN 
>   will no longer pass labels. 
> 
> * Looking to get the label out of the I/O path, 
>   I found the follow ops allocate labels but never 
>   process them (aka they never send a GETATTR in 
>   the compound) 
>       READ, CLOSE, REMOVE, RENAME. 
> 
>   So the label code was be removed from those ops.
> 
> So that leaves LOOKUP, READDIR, GETATTR, LINK, SETATTR, CREATE and OPEN 
> that will continue to pass labels... 
> 
> David Quigley (8):
>   Security: Add hook to calculate context based on a negative dentry.
>   Security: Add Hook to test if the particular xattr is part of a MAC
>     model.
>   LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount
>     data.
>   SELinux: Add new labeling type native labels
>   NFSv4: Add label recommended attribute and NFSv4 flags
>   NFSv4: Introduce new label structure
>   NFSv4: Extend fattr bitmaps to support all 3 words
>   NFS: Extend NFS xattr handlers to accept the security namespace
> 
> Steve Dickson (5):
>   NFSv4.2: Added NFS v4.2 support to the NFS client
>   NFS:Add labels to client function prototypes
>   NFS: Add label lifecycle management
>   NFS: Client implementation of Labeled-NFS
>   Kconfig: Add Kconfig entry for Labeled NFS V4 client
> 
>  fs/nfs/Kconfig                      |  28 ++
>  fs/nfs/callback.c                   |   1 +
>  fs/nfs/callback_xdr.c               |   6 +-
>  fs/nfs/client.c                     |   2 +-
>  fs/nfs/dir.c                        |  46 ++-
>  fs/nfs/getroot.c                    |   2 +-
>  fs/nfs/inode.c                      | 133 +++++++--
>  fs/nfs/namespace.c                  |   2 +-
>  fs/nfs/nfs3acl.c                    |   4 +-
>  fs/nfs/nfs3proc.c                   |  41 +--
>  fs/nfs/nfs4_fs.h                    |   8 +-
>  fs/nfs/nfs4client.c                 |   5 +
>  fs/nfs/nfs4namespace.c              |   2 +-
>  fs/nfs/nfs4proc.c                   | 548 ++++++++++++++++++++++++++++++++----
>  fs/nfs/nfs4xdr.c                    | 184 +++++++++---
>  fs/nfs/proc.c                       |  15 +-
>  fs/nfs/super.c                      |  24 +-
>  include/linux/nfs4.h                |  11 +
>  include/linux/nfs_fs.h              |  30 +-
>  include/linux/nfs_fs_sb.h           |   8 +-
>  include/linux/nfs_xdr.h             |  30 +-
>  include/linux/security.h            |  57 +++-
>  include/uapi/linux/nfs4.h           |   2 +-
>  security/capability.c               |  19 +-
>  security/security.c                 |  24 +-
>  security/selinux/hooks.c            |  92 +++++-
>  security/selinux/include/security.h |   2 +
>  security/selinux/ss/policydb.c      |   5 +-
>  security/smack/smack_lsm.c          |  11 +
>  29 files changed, 1132 insertions(+), 210 deletions(-)
> 
> -- 
> 1.8.1.4
> 
> --
> To unsubscribe from this list: send the line "unsubscribe linux-nfs" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html