Which filesystem is the best for SELinux

Which filesystem is the best for SELinux

[Tetsuji Maverick Rai]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I'm now considering installing SELinux on my Gentoo (I have a little
experience with old redhat 8 or 9 with ext3).  However, I'm wondering
which filesystem to use.  I want journaling filesystem, and stability
comes first, then speed.

Now I'm considering jfs. Next xfs.  Any pros and cons?   There may be a
controversy.

Thanks in advance.

- -Tetsuji
- --
Tetsuji 'Maverick' Rai
Main http://maverick6664.bravehost.com/
Profile:
http://setiweb.ssl.berkeley.edu/beta/view_profile.php?userid=123
pubkey http://mav.atspace.com/tmr_at_gmail.txt
PGP Key ID: 82335CD9
Key fingerprint = 41CA 94B4 2A89 3FF1 5B11  BC37 D597 E667 8233 5CD9

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEbgLM1ZfmZ4IzXNkRAnfSAKCeoOru/BwfncmYKC0TscoKlJ0s7QCgud3c
cDUF4MQ94ZJLtXn3W3kS4So=
=M86e
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Which filesystem is the best for SELinux

[Russell Coker]

On Saturday 20 May 2006 03:39, Tetsuji Maverick Rai 
<tetsuji.maverick.rai@gmail.com> wrote:
> I'm now considering installing SELinux on my Gentoo (I have a little
> experience with old redhat 8 or 9 with ext3).  However, I'm wondering
> which filesystem to use.  I want journaling filesystem, and stability
> comes first, then speed.
>
> Now I'm considering jfs. Next xfs.  Any pros and cons?   There may be a
> controversy.

Why don't you like ext3?  It's working well for almost everyone who is using 
SE Linux.

JFS seems to have no future, there seems little controversy over recommending 
against JFS on this basis.

If you don't like ext3 then it seems that XFS is your only option for running 
SE Linux.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Which filesystem is the best for SELinux

[coderman]

On 5/21/06, Russell Coker <russell@coker.com.au> wrote:
> On Saturday 20 May 2006 03:39, Tetsuji Maverick Rai
> <tetsuji.maverick.rai@gmail.com> wrote:
> > ... I'm wondering
> > which filesystem to use.  I want journaling filesystem, and stability
> > comes first, then speed.
> ...
> If you don't like ext3 then it seems that XFS is your only option for running
> SE Linux.

i would also recommend XFS and have been using it for many years.  you
may need to build a kernel with "XFS Security Label support" enabled
if it is not present already.

the reasons i prefer XFS over ext3 are:
- faster file system creation, especially for very large volumes
(hundreds of GB+)
- faster journal recovery upon failure
- optional quota support

the reasons you might want to use ext3 instead of XFS:
- many distributions do not support installing to or booting from XFS
- ext3 can be mounted as an ext2 file system during recovery or for
other reasons.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Which filesystem is the best for SELinux

[Tetsuji Maverick Rai]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

coderman wrote:
> On 5/21/06, Russell Coker <russell@coker.com.au> wrote:
>> On Saturday 20 May 2006 03:39, Tetsuji Maverick Rai
>> <tetsuji.maverick.rai@gmail.com> wrote:
>> > ... I'm wondering
>> > which filesystem to use.  I want journaling filesystem, and stability
>> > comes first, then speed.
>> ...
>> If you don't like ext3 then it seems that XFS is your only option for
>> running
>> SE Linux.
> 
> i would also recommend XFS and have been using it for many years.  you
> may need to build a kernel with "XFS Security Label support" enabled
> if it is not present already.
> 
> the reasons i prefer XFS over ext3 are:
> - faster file system creation, especially for very large volumes
> (hundreds of GB+)
> - faster journal recovery upon failure
> - optional quota support
> 
> the reasons you might want to use ext3 instead of XFS:
> - many distributions do not support installing to or booting from XFS
> - ext3 can be mounted as an ext2 file system during recovery or for
> other reasons.
> 
hmm...

I have already installed SELinux on jfs. :)   According to SELinux
document, jfs is also supported (of course security label support is
enabled in the kernel config) and I compared the speeds on benchmark page.
http://linuxgazette.net/102/piszcz.html
but it's difficult to tell which is "best".

- -Tetsuji
- --
Tetsuji 'Maverick' Rai
Main http://maverick6664.bravehost.com/
Profile:
http://setiweb.ssl.berkeley.edu/beta/view_profile.php?userid=123
pubkey http://mav.atspace.com/tmr_at_gmail.txt
PGP Key ID: 82335CD9
Key fingerprint = 41CA 94B4 2A89 3FF1 5B11  BC37 D597 E667 8233 5CD9

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEceGF1ZfmZ4IzXNkRAoePAJ0Sko8ZkZvMwA26sDLjl1o7AeFObgCeImsI
ltWRM7LvFa1wYaRlqC2hV2k=
=s8xw
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Which filesystem is the best for SELinux

[Tetsuji Maverick Rai]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

coderman wrote:
> On 5/21/06, Russell Coker <russell@coker.com.au> wrote:
>> On Saturday 20 May 2006 03:39, Tetsuji Maverick Rai
>> <tetsuji.maverick.rai@gmail.com> wrote:
>> > ... I'm wondering
>> > which filesystem to use.  I want journaling filesystem, and stability
>> > comes first, then speed.
>> ...
>> If you don't like ext3 then it seems that XFS is your only option for
>> running
>> SE Linux.
> 
> i would also recommend XFS and have been using it for many years.  you
> may need to build a kernel with "XFS Security Label support" enabled
> if it is not present already.
> 
> the reasons i prefer XFS over ext3 are:
> - faster file system creation, especially for very large volumes
> (hundreds of GB+)
> - faster journal recovery upon failure
> - optional quota support
> 
> the reasons you might want to use ext3 instead of XFS:
> - many distributions do not support installing to or booting from XFS
> - ext3 can be mounted as an ext2 file system during recovery or for
> other reasons.
> 
hmm...

I have already installed SELinux on jfs. :)   According to SELinux
document, jfs is also supported (of course security label support is
enabled in the kernel config) and I compared the speeds on benchmark page.
http://linuxgazette.net/102/piszcz.html
but it's difficult to tell which is "best".

- -Tetsuji
- --
Tetsuji 'Maverick' Rai
Main http://maverick6664.bravehost.com/
Profile:
http://setiweb.ssl.berkeley.edu/beta/view_profile.php?userid=123
pubkey http://mav.atspace.com/tmr_at_gmail.txt
PGP Key ID: 82335CD9
Key fingerprint = 41CA 94B4 2A89 3FF1 5B11  BC37 D597 E667 8233 5CD9

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEceHy1ZfmZ4IzXNkRAjr1AJ4ub3wRcGbglXKrPZuoUepVzdwqegCg69fv
ennYoXik6PJt8bcgQD7FgMg=
=ZYVQ
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Which filesystem is the best for SELinux

[Tetsuji Maverick Rai]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

coderman wrote:
> On 5/21/06, Russell Coker <russell@coker.com.au> wrote:
>> On Saturday 20 May 2006 03:39, Tetsuji Maverick Rai
>> <tetsuji.maverick.rai@gmail.com> wrote:
>> > ... I'm wondering
>> > which filesystem to use.  I want journaling filesystem, and stability
>> > comes first, then speed.
>> ...
>> If you don't like ext3 then it seems that XFS is your only option for
>> running
>> SE Linux.
> 
> i would also recommend XFS and have been using it for many years.  you
> may need to build a kernel with "XFS Security Label support" enabled
> if it is not present already.
> 
> the reasons i prefer XFS over ext3 are:
> - faster file system creation, especially for very large volumes
> (hundreds of GB+)
> - faster journal recovery upon failure
> - optional quota support
> 
> the reasons you might want to use ext3 instead of XFS:
> - many distributions do not support installing to or booting from XFS
> - ext3 can be mounted as an ext2 file system during recovery or for
> other reasons.
> 

PS: I installed on jfs, but if I am not satisfied with it (but
unlikely), I will try xfs next.  Since I am using Gentoo and generic
2.6.16.16 kernel with grub, booting filesystem isn't a factor.  Reading
the last sentence, ext3 also sounds good, but it's slow and I have
failed in file recovery some times with ext3....it may be personal
preference.

- -Tetsuji
- --
Tetsuji 'Maverick' Rai
Main http://maverick6664.bravehost.com/
Profile:
http://setiweb.ssl.berkeley.edu/beta/view_profile.php?userid=123
pubkey http://mav.atspace.com/tmr_at_gmail.txt
PGP Key ID: 82335CD9
Key fingerprint = 41CA 94B4 2A89 3FF1 5B11  BC37 D597 E667 8233 5CD9

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEceiJ1ZfmZ4IzXNkRAjgpAJ9cVszoZePZwCEFcHCStk/UThynlQCg+qY6
bsDxRfNOMTyEIHZjeA9WnR4=
=ABbg
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.