Using IBM's GPFS with SE Linux Extended Attributes

Using IBM's GPFS with SE Linux Extended Attributes

[David C Casler]

[-- Attachment #1: Type: text/plain, Size: 333 bytes --]


Has anyone had success using IBM's General Parallel File System (GPFS) in
such a way that it respects SE Linux extended file attributes? I'm turning
up blanks everywhere I look, and there are those who say it can't be done.

Dave Casler, IBM Global Services
Senior IT Architect
Voice: +1-970-964-5350
e-mail: david.casler@us.ibm.com

[-- Attachment #2: Type: text/html, Size: 382 bytes --]

Re: Using IBM's GPFS with SE Linux Extended Attributes

[Daniel J Walsh]

On 11/11/2009 01:50 PM, David C Casler wrote:
> 
> Has anyone had success using IBM's General Parallel File System (GPFS) in
> such a way that it respects SE Linux extended file attributes? I'm turning
> up blanks everywhere I look, and there are those who say it can't be done.
> 
> Dave Casler, IBM Global Services
> Senior IT Architect
> Voice: +1-970-964-5350
> e-mail: david.casler@us.ibm.com
SELinux policy does not know what a gpfs is, so it would not know whether or not it supports extended attributes.

Why is the file system type?


Probably need a line in policy like

fs_use_xattr gpfs gen_context(system_u:object_r:fs_t,s0);


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.