From: "Matthew N. Dodd" <Matthew.Dodd@sparta.com>
To: James Morris <jmorris@namei.org>
Cc: "David P. Quigley" <dpquigl@tycho.nsa.gov>,
labeled-nfs@linux-nfs.org, linux-kernel@vger.kernel.org,
linux-fsdevel@vger.kernel.org,
linux-security-module@vger.kernel.org, viro@zeniv.linux.org.uk,
selinux@tycho.nsa.gov
Subject: Re: [Labeled-nfs] [PATCH 09/14] NFS: Add security_label text mount option and handling code to NFS
Date: Fri, 12 Dec 2008 16:43:52 -0500 [thread overview]
Message-ID: <4942DB18.6060002@sparta.com> (raw)
In-Reply-To: <alpine.LRH.1.10.0812051546560.12208@tundra.namei.org>
James Morris wrote:
> On Wed, 26 Nov 2008, David P. Quigley wrote:
>
>> + { Opt_security_label, "security_label" },
>> + { Opt_nosecurity_label, "nosecurity_label" },
>
> "seclabel" might be easier for admins to type.
Maybe, though the option is on by default on the client (that is, if the
server supports security_labels then the client will use it, unless
instructed not to.)
To explain the choice in a longer name, I've got an RPC auth flavor for
demonstrating client process label transport called 'auth_seclabel' that
is turned on in /etc/exports via sec=seclabel.
I'll make this change if you feel strongly about it though. :)
next prev parent reply other threads:[~2008-12-12 22:54 UTC|newest]
Thread overview: 61+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-11-26 21:03 [Labeled-nfs] [RFC v4] Security Label Support for NFSv4 David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-11-26 21:03 ` [PATCH 01/14] patch fix_use_before_init_in_nfsd4_list_rec_dir David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-11-26 21:03 ` [PATCH 02/14] VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-11-26 21:03 ` [PATCH 03/14] LSM/SELinux: inode_{get,set,notify}secctx hooks to access LSM security context information David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-12-05 9:58 ` James Morris
2008-12-05 9:58 ` James Morris
2008-12-05 15:25 ` David P. Quigley
2008-12-05 15:25 ` David P. Quigley
2008-12-05 17:32 ` David P. Quigley
2008-12-05 17:32 ` David P. Quigley
2008-12-12 21:50 ` Matthew N. Dodd
2008-11-26 21:03 ` [PATCH 04/14] Security: Add hook to calculate context based on a negative dentry David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-11-26 21:03 ` [PATCH 05/14] Security: Add Hook to test if the particular xattr is part of a MAC model David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-11-26 21:03 ` [PATCH 06/14] SELinux: Add new labeling type native labels David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-11-26 21:03 ` [PATCH 07/14] KConfig: Add KConfig entries for Labeled NFS David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-11-26 21:03 ` [PATCH 08/14] NFSv4: Add label recommended attribute and NFSv4 flags David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-12-05 2:38 ` James Morris
2008-12-05 2:38 ` James Morris
2009-04-03 8:31 ` James Morris
2009-04-03 8:31 ` James Morris
2009-04-03 9:59 ` David P. Quigley
2009-04-03 9:59 ` David P. Quigley
2009-04-03 11:43 ` James Morris
2009-04-03 11:43 ` James Morris
2009-04-03 12:23 ` David P. Quigley
2009-04-03 12:23 ` David P. Quigley
2009-04-05 23:33 ` James Morris
2009-04-05 23:33 ` James Morris
2009-04-03 11:29 ` David P. Quigley
2009-04-03 11:29 ` David P. Quigley
2008-11-26 21:03 ` [PATCH 09/14] NFS: Add security_label text mount option and handling code to NFS David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-12-05 4:47 ` James Morris
2008-12-05 4:47 ` James Morris
2008-12-12 21:43 ` Matthew N. Dodd [this message]
2008-11-26 21:03 ` [PATCH 10/14] NFS: Introduce lifecycle management for label attribute David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-12-05 5:45 ` James Morris
2008-12-05 5:45 ` James Morris
2008-11-26 21:03 ` [PATCH 11/14] NFSv4: Introduce new label structure David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-11-26 21:03 ` [PATCH 12/14] NFS: Client implementation of Labeled-NFS David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-12-05 9:39 ` James Morris
2008-12-05 9:39 ` James Morris
2008-11-26 21:03 ` [PATCH 13/14] NFS: Extend NFS xattr handlers to accept the security namespace David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-11-26 21:03 ` [PATCH 14/14] NFSD: Server implementation of MAC Labeling David P. Quigley
2008-11-26 21:03 ` David P. Quigley
2008-12-05 10:00 ` James Morris
2008-12-05 10:00 ` James Morris
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4942DB18.6060002@sparta.com \
--to=matthew.dodd@sparta.com \
--cc=dpquigl@tycho.nsa.gov \
--cc=jmorris@namei.org \
--cc=labeled-nfs@linux-nfs.org \
--cc=linux-fsdevel@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=selinux@tycho.nsa.gov \
--cc=viro@zeniv.linux.org.uk \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.