From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from jazzhorn.ncsc.mil (mummy.ncsc.mil [144.51.88.129]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with SMTP id l71L884f030507 for ; Wed, 1 Aug 2007 17:08:08 -0400 Received: from web36615.mail.mud.yahoo.com (jazzhorn.ncsc.mil [144.51.5.9]) by jazzhorn.ncsc.mil (8.12.10/8.12.10) with SMTP id l71L86pI027405 for ; Wed, 1 Aug 2007 21:08:07 GMT Date: Wed, 1 Aug 2007 14:08:06 -0700 (PDT) From: Casey Schaufler Reply-To: casey@schaufler-ca.com Subject: Re: [PATCH 3/7] KConfig: Add KConfig entries for MAC labeled NFS To: "David P. Quigley" , selinux@tycho.nsa.gov, labeled-nfs@linux-nfs.org Cc: "David P. Quigley" In-Reply-To: <118599853274-git-send-email-dpquigl@tycho.nsa.gov> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Message-ID: <493100.35943.qm@web36615.mail.mud.yahoo.com> Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov --- "David P. Quigley" wrote: > From: David P. Quigley > > This patch adds two entries into the fs/KConfig file. The first entry > NFS_V4_MAC enables MAC labeling support to the NFSv4 client while the second > entry NFSD_V4_MAC enables MAC labeling support on the server side. > > Signed-off-by: David P. Quigley > --- > fs/Kconfig | 18 ++++++++++++++++++ > 1 files changed, 18 insertions(+), 0 deletions(-) > Unless you change away from u32 labels: > diff --git a/fs/Kconfig b/fs/Kconfig > index 58a0650..c4e42e2 100644 > --- a/fs/Kconfig > +++ b/fs/Kconfig > @@ -1593,6 +1593,15 @@ config NFS_V4 > > If unsure, say N. > > +config NFS_V4_MAC config NFS_V4_SELINUX > + bool "Provide MAC Labeled NFSv4 client support" bool "Provide SELINUX Labeled NFSv4 client support" > + depends on NFS_V4 && SECURITY_SELINUX > + help > + Say Y here if you want label attribute support for NFS version 4. > + > + If unsure, say N. > + > + > config NFS_DIRECTIO > bool "Allow direct I/O on NFS files" > depends on NFS_FS > @@ -1682,6 +1691,15 @@ config NFSD_V4 > should only be used if you are interested in helping to test NFSv4. > If unsure, say N. > > +config NFSD_V4_MAC config NFS_V4_SELINUX > + bool "Provide MAC Labeled NFSv4 server support" bool "Provide SELINUX Labeled NFSv4 server support" > + depends on NFSD_V4 && SECURITY_SELINUX > + help > + If you would like to include support for label file attributes > + over NFSv4, say Y here. > + > + If unsure, say N. > + > config NFSD_TCP > bool "Provide NFS server over TCP support" > depends on NFSD > -- > 1.5.2.2 > > > -- > This message was distributed to subscribers of the selinux mailing list. > If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with > the words "unsubscribe selinux" without quotes as the message. > > > Casey Schaufler casey@schaufler-ca.com -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.