linux-fsdevel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Steve Dickson <SteveD-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
To: "J. Bruce Fields" <bfields-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
Cc: Trond Myklebust
	<Trond.Myklebust-HgOvQuBEEgTQT0dZR+AlfA@public.gmane.org>,
	"David P. Quigley"
	<dpquigl-+05T5uksL2qpZYMLLGbcSA@public.gmane.org>,
	Linux NFS list
	<linux-nfs-u79uwXL29TY76Z2rM5mHXA@public.gmane.org>,
	Linux FS devel list
	<linux-fsdevel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org>,
	Linux Security List
	<linux-security-module-u79uwXL29TY76Z2rM5mHXA@public.gmane.org>,
	SELinux List <selinux-+05T5uksL2qpZYMLLGbcSA@public.gmane.org>
Subject: Re: [PATCH 00/19] lnfs: 3.9-rc5 release
Date: Wed, 10 Apr 2013 11:48:45 -0400	[thread overview]
Message-ID: <516589DD.2020901@RedHat.com> (raw)
In-Reply-To: <20130410150940.GB24404-spRCxval1Z7TsXDwO4sDpg@public.gmane.org>



On 10/04/13 11:09, J. Bruce Fields wrote:
> On Tue, Apr 02, 2013 at 05:45:41PM -0400, Steve Dickson wrote:
>> From: Steve Dickson <steved-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
>>
>> Here is the next release of the Label NFS patches 
>> forward ported to linux-3.9-rc3.
>>
>> I decided to include the the v4.2 enabling patches since 
>> I'm doing all my testing with both sets so at this point 
>> I don't think it makes sense to separate them. Plus I'm
>> hoping they will take care of the SETATTR problem Bruce was 
>> seeing since label attributes were leaking into the bitmask
>> when they were not suppose to. 
> 
> Still getting a failure.  All you need to do is something like:
> 
> 	git clone git://linux-nfs.org/~bfields/pynfs.git
> 	cd pynfs
> 	./setup.py build
> 	./setup.py build_ext --inplace
> 	./nfs4.0/testserver.py pip1:/path/to/export/tmpdir ---maketree --rundeps SATT13
Ok... Is this with labels enabled or not enabled?

steved.

> 
> --b.
> 
>>
>> I also believe I've address all the review comments of the previous
>> release. Thank you very much for those cycles, it definitely 
>> appreciated!
>>
>> The patches are on a public git tree at
>>     git://fedorapeople.org/~steved/linux-steved lnfs-v3.9-rc5
>>
>> Fedora rpms on request. I didn't think anybody was using them so I 
>> stopped building them. If that is not the case, please let me know.
>>
>> David Quigley (12):
>>   Security: Add hook to calculate context based on a negative dentry.
>>   Security: Add Hook to test if the particular xattr is part of a MAC
>>     model.
>>   LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount
>>     data.
>>   SELinux: Add new labeling type native labels
>>   NFSv4: Add label recommended attribute and NFSv4 flags
>>   NFSv4: Introduce new label structure
>>   NFSv4: Extend fattr bitmaps to support all 3 words
>>   NFS:Add labels to client function prototypes
>>   NFS: Add label lifecycle management
>>   NFS: Client implementation of Labeled-NFS
>>   NFS: Extend NFS xattr handlers to accept the security namespace
>>   NFSD: Server implementation of MAC Labeling
>>
>> Steve Dickson (7):
>>   Kconfig: Add Kconfig entry for Labeled NFS V4 client
>>   Kconfig: Add Kconfig entry for Labeled NFS V4 server
>>   NFSv4.2: Added NFS v4.2 support to the NFS client
>>   NFSv4.2: Only allocate labels on v4.2 mounts
>>   NFSv4.2: Only set the label attribute on v4.2 mounts
>>   NFSv4.2: Added v4.2 error codes
>>   NFSDv4.2: Added NFS v4.2 support to the NFS server
>>
>>  fs/nfs/Kconfig                      |  28 ++
>>  fs/nfs/callback.c                   |   1 +
>>  fs/nfs/client.c                     |   2 +-
>>  fs/nfs/dir.c                        |  46 ++-
>>  fs/nfs/getroot.c                    |   2 +-
>>  fs/nfs/inode.c                      | 133 ++++++--
>>  fs/nfs/namespace.c                  |   2 +-
>>  fs/nfs/nfs3acl.c                    |   4 +-
>>  fs/nfs/nfs3proc.c                   |  41 +--
>>  fs/nfs/nfs4_fs.h                    |   8 +-
>>  fs/nfs/nfs4client.c                 |   5 +
>>  fs/nfs/nfs4namespace.c              |   2 +-
>>  fs/nfs/nfs4proc.c                   | 614 ++++++++++++++++++++++++++++++++----
>>  fs/nfs/nfs4xdr.c                    | 188 ++++++++---
>>  fs/nfs/pnfs.c                       |   2 +-
>>  fs/nfs/proc.c                       |  15 +-
>>  fs/nfs/super.c                      |  24 +-
>>  fs/nfsd/Kconfig                     |  16 +
>>  fs/nfsd/nfs4proc.c                  |  41 +++
>>  fs/nfsd/nfs4xdr.c                   | 117 ++++++-
>>  fs/nfsd/nfsd.h                      |  14 +-
>>  fs/nfsd/nfsproc.c                   |   1 +
>>  fs/nfsd/vfs.c                       |  28 ++
>>  fs/nfsd/vfs.h                       |   2 +
>>  fs/nfsd/xdr4.h                      |   3 +
>>  include/linux/nfs4.h                |  20 ++
>>  include/linux/nfs_fs.h              |  40 ++-
>>  include/linux/nfs_fs_sb.h           |  10 +-
>>  include/linux/nfs_xdr.h             |  30 +-
>>  include/linux/security.h            |  57 +++-
>>  include/uapi/linux/nfs4.h           |   2 +-
>>  security/capability.c               |  19 +-
>>  security/security.c                 |  24 +-
>>  security/selinux/hooks.c            |  92 +++++-
>>  security/selinux/include/security.h |   2 +
>>  security/selinux/ss/policydb.c      |   5 +-
>>  security/smack/smack_lsm.c          |  11 +
>>  37 files changed, 1432 insertions(+), 219 deletions(-)
>>
>> -- 
>> 1.8.1.4
>>
--
To unsubscribe from this list: send the line "unsubscribe linux-nfs" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

  parent reply	other threads:[~2013-04-10 15:48 UTC|newest]

Thread overview: 40+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2013-04-02 21:45 [PATCH 00/19] lnfs: 3.9-rc5 release Steve Dickson
2013-04-02 21:45 ` [PATCH 01/19] Security: Add hook to calculate context based on a negative dentry Steve Dickson
2013-04-02 23:35   ` Myklebust, Trond
     [not found]     ` <1364945729.3026.7.camel-5lNtUQgoD8Pfa3cDbr2K10B+6BGkLq7r@public.gmane.org>
2013-04-03 19:57       ` David Quigley
     [not found] ` <1364939160-20874-1-git-send-email-SteveD-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-04-02 21:45   ` [PATCH 02/19] Security: Add Hook to test if the particular xattr is part of a MAC model Steve Dickson
2013-04-02 21:45   ` [PATCH 08/19] NFS:Add labels to client function prototypes Steve Dickson
2013-04-02 21:45   ` [PATCH 12/19] Kconfig: Add Kconfig entry for Labeled NFS V4 client Steve Dickson
2013-04-02 21:45   ` [PATCH 13/19] NFSD: Server implementation of MAC Labeling Steve Dickson
     [not found]     ` <1364939160-20874-14-git-send-email-SteveD-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-04-10 15:19       ` J. Bruce Fields
     [not found]         ` <20130410151953.GC24404-spRCxval1Z7TsXDwO4sDpg@public.gmane.org>
2013-04-23 19:40           ` Steve Dickson
2013-04-23 19:44             ` J. Bruce Fields
2013-04-23 19:51               ` Steve Dickson
2013-04-02 21:46   ` [PATCH 19/19] NFSDv4.2: Added NFS v4.2 support to the NFS server Steve Dickson
2013-04-10 15:25     ` J. Bruce Fields
2013-04-10 15:58       ` Steve Dickson
2013-04-10 20:12         ` J. Bruce Fields
2013-04-11 16:58           ` Steve Dickson
2013-04-02 21:45 ` [PATCH 03/19] LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount data Steve Dickson
2013-04-02 21:45 ` [PATCH 04/19] SELinux: Add new labeling type native labels Steve Dickson
2013-04-02 21:45 ` [PATCH 05/19] NFSv4: Add label recommended attribute and NFSv4 flags Steve Dickson
2013-04-02 21:45 ` [PATCH 06/19] NFSv4: Introduce new label structure Steve Dickson
2013-04-02 21:45 ` [PATCH 07/19] NFSv4: Extend fattr bitmaps to support all 3 words Steve Dickson
2013-04-02 21:45 ` [PATCH 09/19] NFS: Add label lifecycle management Steve Dickson
2013-04-02 21:45 ` [PATCH 10/19] NFS: Client implementation of Labeled-NFS Steve Dickson
2013-04-02 21:45 ` [PATCH 11/19] NFS: Extend NFS xattr handlers to accept the security namespace Steve Dickson
2013-04-02 21:45 ` [PATCH 14/19] Kconfig: Add Kconfig entry for Labeled NFS V4 server Steve Dickson
2013-04-02 21:45 ` [PATCH 15/19] NFSv4.2: Added NFS v4.2 support to the NFS client Steve Dickson
2013-04-02 21:45 ` [PATCH 16/19] NFSv4.2: Only allocate labels on v4.2 mounts Steve Dickson
2013-04-02 21:45 ` [PATCH 17/19] NFSv4.2: Only set the label attribute " Steve Dickson
2013-04-02 21:45 ` [PATCH 18/19] NFSv4.2: Added v4.2 error codes Steve Dickson
2013-04-10 15:09 ` [PATCH 00/19] lnfs: 3.9-rc5 release J. Bruce Fields
     [not found]   ` <20130410150940.GB24404-spRCxval1Z7TsXDwO4sDpg@public.gmane.org>
2013-04-10 15:48     ` Steve Dickson [this message]
2013-04-12 15:03       ` J. Bruce Fields
2013-04-23 15:46     ` Steve Dickson
2013-04-23 16:05       ` J. Bruce Fields
2013-04-23 17:22         ` J. Bruce Fields
     [not found]           ` <20130423172227.GF20622-spRCxval1Z7TsXDwO4sDpg@public.gmane.org>
2013-04-23 18:04             ` Steve Dickson
     [not found]               ` <5176CD42.4080405-AfCzQyP5zfLQT0dZR+AlfA@public.gmane.org>
2013-04-23 18:15                 ` J. Bruce Fields
2013-04-23 18:40               ` Mimi Zohar
2013-04-23 18:57                 ` Steve Dickson

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=516589DD.2020901@RedHat.com \
    --to=steved-h+wxahxf7alqt0dzr+alfa@public.gmane.org \
    --cc=Trond.Myklebust-HgOvQuBEEgTQT0dZR+AlfA@public.gmane.org \
    --cc=bfields-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org \
    --cc=dpquigl-+05T5uksL2qpZYMLLGbcSA@public.gmane.org \
    --cc=linux-fsdevel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \
    --cc=linux-nfs-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \
    --cc=linux-security-module-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \
    --cc=selinux-+05T5uksL2qpZYMLLGbcSA@public.gmane.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).