From: Steve Dickson <SteveD-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
To: "J. Bruce Fields" <bfields-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
Cc: Trond Myklebust
<Trond.Myklebust-HgOvQuBEEgTQT0dZR+AlfA@public.gmane.org>,
"David P. Quigley"
<dpquigl-+05T5uksL2qpZYMLLGbcSA@public.gmane.org>,
Linux NFS list
<linux-nfs-u79uwXL29TY76Z2rM5mHXA@public.gmane.org>,
Linux FS devel list
<linux-fsdevel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org>,
Linux Security List
<linux-security-module-u79uwXL29TY76Z2rM5mHXA@public.gmane.org>,
SELinux List <selinux-+05T5uksL2qpZYMLLGbcSA@public.gmane.org>
Subject: Re: [PATCH 00/19] lnfs: 3.9-rc5 release
Date: Wed, 10 Apr 2013 11:48:45 -0400 [thread overview]
Message-ID: <516589DD.2020901@RedHat.com> (raw)
In-Reply-To: <20130410150940.GB24404-spRCxval1Z7TsXDwO4sDpg@public.gmane.org>
On 10/04/13 11:09, J. Bruce Fields wrote:
> On Tue, Apr 02, 2013 at 05:45:41PM -0400, Steve Dickson wrote:
>> From: Steve Dickson <steved-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
>>
>> Here is the next release of the Label NFS patches
>> forward ported to linux-3.9-rc3.
>>
>> I decided to include the the v4.2 enabling patches since
>> I'm doing all my testing with both sets so at this point
>> I don't think it makes sense to separate them. Plus I'm
>> hoping they will take care of the SETATTR problem Bruce was
>> seeing since label attributes were leaking into the bitmask
>> when they were not suppose to.
>
> Still getting a failure. All you need to do is something like:
>
> git clone git://linux-nfs.org/~bfields/pynfs.git
> cd pynfs
> ./setup.py build
> ./setup.py build_ext --inplace
> ./nfs4.0/testserver.py pip1:/path/to/export/tmpdir ---maketree --rundeps SATT13
Ok... Is this with labels enabled or not enabled?
steved.
>
> --b.
>
>>
>> I also believe I've address all the review comments of the previous
>> release. Thank you very much for those cycles, it definitely
>> appreciated!
>>
>> The patches are on a public git tree at
>> git://fedorapeople.org/~steved/linux-steved lnfs-v3.9-rc5
>>
>> Fedora rpms on request. I didn't think anybody was using them so I
>> stopped building them. If that is not the case, please let me know.
>>
>> David Quigley (12):
>> Security: Add hook to calculate context based on a negative dentry.
>> Security: Add Hook to test if the particular xattr is part of a MAC
>> model.
>> LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount
>> data.
>> SELinux: Add new labeling type native labels
>> NFSv4: Add label recommended attribute and NFSv4 flags
>> NFSv4: Introduce new label structure
>> NFSv4: Extend fattr bitmaps to support all 3 words
>> NFS:Add labels to client function prototypes
>> NFS: Add label lifecycle management
>> NFS: Client implementation of Labeled-NFS
>> NFS: Extend NFS xattr handlers to accept the security namespace
>> NFSD: Server implementation of MAC Labeling
>>
>> Steve Dickson (7):
>> Kconfig: Add Kconfig entry for Labeled NFS V4 client
>> Kconfig: Add Kconfig entry for Labeled NFS V4 server
>> NFSv4.2: Added NFS v4.2 support to the NFS client
>> NFSv4.2: Only allocate labels on v4.2 mounts
>> NFSv4.2: Only set the label attribute on v4.2 mounts
>> NFSv4.2: Added v4.2 error codes
>> NFSDv4.2: Added NFS v4.2 support to the NFS server
>>
>> fs/nfs/Kconfig | 28 ++
>> fs/nfs/callback.c | 1 +
>> fs/nfs/client.c | 2 +-
>> fs/nfs/dir.c | 46 ++-
>> fs/nfs/getroot.c | 2 +-
>> fs/nfs/inode.c | 133 ++++++--
>> fs/nfs/namespace.c | 2 +-
>> fs/nfs/nfs3acl.c | 4 +-
>> fs/nfs/nfs3proc.c | 41 +--
>> fs/nfs/nfs4_fs.h | 8 +-
>> fs/nfs/nfs4client.c | 5 +
>> fs/nfs/nfs4namespace.c | 2 +-
>> fs/nfs/nfs4proc.c | 614 ++++++++++++++++++++++++++++++++----
>> fs/nfs/nfs4xdr.c | 188 ++++++++---
>> fs/nfs/pnfs.c | 2 +-
>> fs/nfs/proc.c | 15 +-
>> fs/nfs/super.c | 24 +-
>> fs/nfsd/Kconfig | 16 +
>> fs/nfsd/nfs4proc.c | 41 +++
>> fs/nfsd/nfs4xdr.c | 117 ++++++-
>> fs/nfsd/nfsd.h | 14 +-
>> fs/nfsd/nfsproc.c | 1 +
>> fs/nfsd/vfs.c | 28 ++
>> fs/nfsd/vfs.h | 2 +
>> fs/nfsd/xdr4.h | 3 +
>> include/linux/nfs4.h | 20 ++
>> include/linux/nfs_fs.h | 40 ++-
>> include/linux/nfs_fs_sb.h | 10 +-
>> include/linux/nfs_xdr.h | 30 +-
>> include/linux/security.h | 57 +++-
>> include/uapi/linux/nfs4.h | 2 +-
>> security/capability.c | 19 +-
>> security/security.c | 24 +-
>> security/selinux/hooks.c | 92 +++++-
>> security/selinux/include/security.h | 2 +
>> security/selinux/ss/policydb.c | 5 +-
>> security/smack/smack_lsm.c | 11 +
>> 37 files changed, 1432 insertions(+), 219 deletions(-)
>>
>> --
>> 1.8.1.4
>>
--
To unsubscribe from this list: send the line "unsubscribe linux-nfs" in
the body of a message to majordomo-u79uwXL29TY76Z2rM5mHXA@public.gmane.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
next prev parent reply other threads:[~2013-04-10 15:48 UTC|newest]
Thread overview: 40+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-04-02 21:45 [PATCH 00/19] lnfs: 3.9-rc5 release Steve Dickson
2013-04-02 21:45 ` [PATCH 01/19] Security: Add hook to calculate context based on a negative dentry Steve Dickson
2013-04-02 23:35 ` Myklebust, Trond
[not found] ` <1364945729.3026.7.camel-5lNtUQgoD8Pfa3cDbr2K10B+6BGkLq7r@public.gmane.org>
2013-04-03 19:57 ` David Quigley
[not found] ` <1364939160-20874-1-git-send-email-SteveD-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-04-02 21:45 ` [PATCH 02/19] Security: Add Hook to test if the particular xattr is part of a MAC model Steve Dickson
2013-04-02 21:45 ` [PATCH 08/19] NFS:Add labels to client function prototypes Steve Dickson
2013-04-02 21:45 ` [PATCH 12/19] Kconfig: Add Kconfig entry for Labeled NFS V4 client Steve Dickson
2013-04-02 21:45 ` [PATCH 13/19] NFSD: Server implementation of MAC Labeling Steve Dickson
[not found] ` <1364939160-20874-14-git-send-email-SteveD-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-04-10 15:19 ` J. Bruce Fields
[not found] ` <20130410151953.GC24404-spRCxval1Z7TsXDwO4sDpg@public.gmane.org>
2013-04-23 19:40 ` Steve Dickson
2013-04-23 19:44 ` J. Bruce Fields
2013-04-23 19:51 ` Steve Dickson
2013-04-02 21:46 ` [PATCH 19/19] NFSDv4.2: Added NFS v4.2 support to the NFS server Steve Dickson
2013-04-10 15:25 ` J. Bruce Fields
2013-04-10 15:58 ` Steve Dickson
2013-04-10 20:12 ` J. Bruce Fields
2013-04-11 16:58 ` Steve Dickson
2013-04-02 21:45 ` [PATCH 03/19] LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount data Steve Dickson
2013-04-02 21:45 ` [PATCH 04/19] SELinux: Add new labeling type native labels Steve Dickson
2013-04-02 21:45 ` [PATCH 05/19] NFSv4: Add label recommended attribute and NFSv4 flags Steve Dickson
2013-04-02 21:45 ` [PATCH 06/19] NFSv4: Introduce new label structure Steve Dickson
2013-04-02 21:45 ` [PATCH 07/19] NFSv4: Extend fattr bitmaps to support all 3 words Steve Dickson
2013-04-02 21:45 ` [PATCH 09/19] NFS: Add label lifecycle management Steve Dickson
2013-04-02 21:45 ` [PATCH 10/19] NFS: Client implementation of Labeled-NFS Steve Dickson
2013-04-02 21:45 ` [PATCH 11/19] NFS: Extend NFS xattr handlers to accept the security namespace Steve Dickson
2013-04-02 21:45 ` [PATCH 14/19] Kconfig: Add Kconfig entry for Labeled NFS V4 server Steve Dickson
2013-04-02 21:45 ` [PATCH 15/19] NFSv4.2: Added NFS v4.2 support to the NFS client Steve Dickson
2013-04-02 21:45 ` [PATCH 16/19] NFSv4.2: Only allocate labels on v4.2 mounts Steve Dickson
2013-04-02 21:45 ` [PATCH 17/19] NFSv4.2: Only set the label attribute " Steve Dickson
2013-04-02 21:45 ` [PATCH 18/19] NFSv4.2: Added v4.2 error codes Steve Dickson
2013-04-10 15:09 ` [PATCH 00/19] lnfs: 3.9-rc5 release J. Bruce Fields
[not found] ` <20130410150940.GB24404-spRCxval1Z7TsXDwO4sDpg@public.gmane.org>
2013-04-10 15:48 ` Steve Dickson [this message]
2013-04-12 15:03 ` J. Bruce Fields
2013-04-23 15:46 ` Steve Dickson
2013-04-23 16:05 ` J. Bruce Fields
2013-04-23 17:22 ` J. Bruce Fields
[not found] ` <20130423172227.GF20622-spRCxval1Z7TsXDwO4sDpg@public.gmane.org>
2013-04-23 18:04 ` Steve Dickson
[not found] ` <5176CD42.4080405-AfCzQyP5zfLQT0dZR+AlfA@public.gmane.org>
2013-04-23 18:15 ` J. Bruce Fields
2013-04-23 18:40 ` Mimi Zohar
2013-04-23 18:57 ` Steve Dickson
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=516589DD.2020901@RedHat.com \
--to=steved-h+wxahxf7alqt0dzr+alfa@public.gmane.org \
--cc=Trond.Myklebust-HgOvQuBEEgTQT0dZR+AlfA@public.gmane.org \
--cc=bfields-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org \
--cc=dpquigl-+05T5uksL2qpZYMLLGbcSA@public.gmane.org \
--cc=linux-fsdevel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \
--cc=linux-nfs-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \
--cc=linux-security-module-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \
--cc=selinux-+05T5uksL2qpZYMLLGbcSA@public.gmane.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).