From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from msux-gh1-uea02.nsa.gov (msux-gh1-uea02.nsa.gov [63.239.67.2]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id nABItxnO010372 for ; Wed, 11 Nov 2009 13:55:59 -0500 Received: from e36.co.us.ibm.com (localhost [127.0.0.1]) by msux-gh1-uea02.nsa.gov (8.12.10/8.12.10) with ESMTP id nABIw0Ap004524 for ; Wed, 11 Nov 2009 18:58:00 GMT Received: from d03relay01.boulder.ibm.com (d03relay01.boulder.ibm.com [9.17.195.226]) by e36.co.us.ibm.com (8.14.3/8.13.1) with ESMTP id nABIrgmb024579 for ; Wed, 11 Nov 2009 11:53:42 -0700 Received: from d03av04.boulder.ibm.com (d03av04.boulder.ibm.com [9.17.195.170]) by d03relay01.boulder.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id nABItj9p016094 for ; Wed, 11 Nov 2009 11:55:45 -0700 Received: from d03av04.boulder.ibm.com (loopback [127.0.0.1]) by d03av04.boulder.ibm.com (8.14.3/8.13.1/NCO v10.0 AVout) with ESMTP id nABCpNrD004380 for ; Wed, 11 Nov 2009 05:51:23 -0700 Received: from d03nm113.boulder.ibm.com (d03nm113.boulder.ibm.com [9.17.195.139]) by d03av04.boulder.ibm.com (8.14.3/8.13.1/NCO v10.0 AVin) with ESMTP id nABCpN01004362 for ; Wed, 11 Nov 2009 05:51:23 -0700 Subject: Using IBM's GPFS with SE Linux Extended Attributes To: selinux@tycho.nsa.gov Message-ID: From: David C Casler Date: Wed, 11 Nov 2009 11:50:38 -0700 MIME-Version: 1.0 Content-type: multipart/alternative; Boundary="0__=08BBFCF8DFF4E7FB8f9e8a93df938690918c08BBFCF8DFF4E7FB" Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov --0__=08BBFCF8DFF4E7FB8f9e8a93df938690918c08BBFCF8DFF4E7FB Content-type: text/plain; charset=US-ASCII Has anyone had success using IBM's General Parallel File System (GPFS) in such a way that it respects SE Linux extended file attributes? I'm turning up blanks everywhere I look, and there are those who say it can't be done. Dave Casler, IBM Global Services Senior IT Architect Voice: +1-970-964-5350 e-mail: david.casler@us.ibm.com --0__=08BBFCF8DFF4E7FB8f9e8a93df938690918c08BBFCF8DFF4E7FB Content-type: text/html; charset=US-ASCII Content-Disposition: inline

Has anyone had success using IBM's General Parallel File System (GPFS) in such a way that it respects SE Linux extended file attributes? I'm turning up blanks everywhere I look, and there are those who say it can't be done.

Dave Casler, IBM Global Services
Senior IT Architect
Voice: +1-970-964-5350
e-mail: david.casler@us.ibm.com --0__=08BBFCF8DFF4E7FB8f9e8a93df938690918c08BBFCF8DFF4E7FB-- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from msux-gh1-uea01.nsa.gov (msux-gh1-uea01.nsa.gov [63.239.67.1]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id nACHfRXm023890 for ; Thu, 12 Nov 2009 12:41:27 -0500 Received: from mx1.redhat.com (localhost [127.0.0.1]) by msux-gh1-uea01.nsa.gov (8.12.10/8.12.10) with ESMTP id nACHePCC028819 for ; Thu, 12 Nov 2009 17:40:26 GMT Message-ID: <4AFC48C6.7000806@redhat.com> Date: Thu, 12 Nov 2009 12:41:26 -0500 From: Daniel J Walsh MIME-Version: 1.0 To: David C Casler CC: selinux@tycho.nsa.gov Subject: Re: Using IBM's GPFS with SE Linux Extended Attributes References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov On 11/11/2009 01:50 PM, David C Casler wrote: > > Has anyone had success using IBM's General Parallel File System (GPFS) in > such a way that it respects SE Linux extended file attributes? I'm turning > up blanks everywhere I look, and there are those who say it can't be done. > > Dave Casler, IBM Global Services > Senior IT Architect > Voice: +1-970-964-5350 > e-mail: david.casler@us.ibm.com SELinux policy does not know what a gpfs is, so it would not know whether or not it supports extended attributes. Why is the file system type? Probably need a line in policy like fs_use_xattr gpfs gen_context(system_u:object_r:fs_t,s0); -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.