linux-fsdevel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Ric Wheeler <rwheeler@redhat.com>
To: Steve Dickson <SteveD@redhat.com>,
	Trond Myklebust <Trond.Myklebust@netapp.com>,
	"J. Bruce Fields" <bfields@redhat.com>,
	"David P. Quigley" <dpquigl@tycho.nsa.gov>,
	Linux NFS list <linux-nfs@vger.kernel.org>,
	Linux FS devel list <linux-fsdevel@vger.kernel.org>
Cc: Linux Security List <linux-security-module@vger.kernel.org>,
	SELinux List <selinux@tycho.nsa.gov>,
	Jack Rieden <jrieden@redhat.com>
Subject: Re: [PATCH 00/17] lnfs: linux-3.9 release
Date: Sat, 04 May 2013 07:17:36 +0300	[thread overview]
Message-ID: <51848BE0.2080901@redhat.com> (raw)
In-Reply-To: <1367515151-31015-1-git-send-email-SteveD@redhat.com>

On 05/02/2013 08:18 PM, Steve Dickson wrote:
> From: Steve Dickson <steved@redhat.com>
>
> Here is an the next rlease of the label NFS patches
> ported to the linux-3.9 release
>
> The following changes were made from the previous release.
> (Note, only the server patch changed in this release)
>
> * Remove the buffer overflow in the allocation of labels.
>
> * Removed needless char * casting
>
> * Removed the -EMSGSIZE to nfs4err_badlabel errno mapping
>    by changing the return value of nfsd4_label_alloc() to
>    be a _be32 value.

It would be great to see this patch series land in time for 3.10 - seems like a 
major feature that has had been held in development for years and it does have a 
very interested user base waiting for this to land.

Are there any existing roadblocks to having this make it this merge window?

Thanks!

Ric



>
>
> David Quigley (12):
>    Security: Add hook to calculate context based on a negative dentry.
>    Security: Add Hook to test if the particular xattr is part of a MAC
>      model.
>    LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount
>      data.
>    SELinux: Add new labeling type native labels
>    NFSv4: Add label recommended attribute and NFSv4 flags
>    NFSv4: Introduce new label structure
>    NFSv4: Extend fattr bitmaps to support all 3 words
>    NFS:Add labels to client function prototypes
>    NFS: Add label lifecycle management
>    NFS: Client implementation of Labeled-NFS
>    NFS: Extend NFS xattr handlers to accept the security namespace
>    NFSD: Server implementation of MAC Labeling
>
> Steve Dickson (5):
>    NFSv4.2: Added v4.2 error codes
>    NFSv4.2: Added NFS v4.2 support to the NFS client
>    NFSDv4.2: Added NFS v4.2 support to the NFS server
>    Kconfig: Add Kconfig entry for Labeled NFS V4 client
>    Kconfig: Add Kconfig entry for Labeled NFS V4 server
>
>   fs/nfs/Kconfig                      |  28 ++
>   fs/nfs/callback.c                   |   1 +
>   fs/nfs/client.c                     |   2 +-
>   fs/nfs/dir.c                        |  46 ++-
>   fs/nfs/getroot.c                    |   2 +-
>   fs/nfs/inode.c                      | 133 ++++++--
>   fs/nfs/namespace.c                  |   2 +-
>   fs/nfs/nfs3acl.c                    |   4 +-
>   fs/nfs/nfs3proc.c                   |  41 +--
>   fs/nfs/nfs4_fs.h                    |   8 +-
>   fs/nfs/nfs4client.c                 |   5 +
>   fs/nfs/nfs4namespace.c              |   2 +-
>   fs/nfs/nfs4proc.c                   | 596 ++++++++++++++++++++++++++++++++----
>   fs/nfs/nfs4xdr.c                    | 188 +++++++++---
>   fs/nfs/pnfs.c                       |   2 +-
>   fs/nfs/proc.c                       |  15 +-
>   fs/nfs/super.c                      |  24 +-
>   fs/nfsd/Kconfig                     |  16 +
>   fs/nfsd/nfs4proc.c                  |  41 +++
>   fs/nfsd/nfs4xdr.c                   | 124 +++++++-
>   fs/nfsd/nfsd.h                      |  22 +-
>   fs/nfsd/vfs.c                       |  28 ++
>   fs/nfsd/vfs.h                       |   2 +
>   fs/nfsd/xdr4.h                      |   3 +
>   include/linux/nfs4.h                |  20 ++
>   include/linux/nfs_fs.h              |  40 ++-
>   include/linux/nfs_fs_sb.h           |  10 +-
>   include/linux/nfs_xdr.h             |  30 +-
>   include/linux/security.h            |  57 +++-
>   include/uapi/linux/nfs4.h           |   2 +-
>   security/capability.c               |  19 +-
>   security/security.c                 |  24 +-
>   security/selinux/hooks.c            |  92 +++++-
>   security/selinux/include/security.h |   2 +
>   security/selinux/ss/policydb.c      |   5 +-
>   security/smack/smack_lsm.c          |  11 +
>   36 files changed, 1427 insertions(+), 220 deletions(-)
>


  parent reply	other threads:[~2013-05-04  4:17 UTC|newest]

Thread overview: 39+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2013-05-02 17:18 [PATCH 00/17] lnfs: linux-3.9 release Steve Dickson
2013-05-02 17:18 ` [PATCH 01/17] NFSv4.2: Added v4.2 error codes Steve Dickson
2013-05-02 17:18 ` [PATCH 02/17] NFSv4.2: Added NFS v4.2 support to the NFS client Steve Dickson
     [not found] ` <1367515151-31015-1-git-send-email-SteveD-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-05-02 17:18   ` [PATCH 03/17] NFSDv4.2: Added NFS v4.2 support to the NFS server Steve Dickson
2013-05-02 17:18 ` [PATCH 04/17] Security: Add hook to calculate context based on a negative dentry Steve Dickson
2013-05-02 23:36   ` James Morris
2013-05-02 17:18 ` [PATCH 05/17] Security: Add Hook to test if the particular xattr is part of a MAC model Steve Dickson
2013-05-02 23:36   ` James Morris
2013-05-02 17:19 ` [PATCH 06/17] LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount data Steve Dickson
2013-05-02 23:37   ` James Morris
2013-05-02 17:19 ` [PATCH 07/17] SELinux: Add new labeling type native labels Steve Dickson
     [not found]   ` <1367515151-31015-8-git-send-email-SteveD-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-05-02 23:37     ` James Morris
2013-05-02 17:19 ` [PATCH 08/17] NFSv4: Add label recommended attribute and NFSv4 flags Steve Dickson
2013-05-02 17:19 ` [PATCH 09/17] NFSv4: Introduce new label structure Steve Dickson
2013-05-02 17:19 ` [PATCH 10/17] NFSv4: Extend fattr bitmaps to support all 3 words Steve Dickson
2013-05-02 17:19 ` [PATCH 11/17] NFS:Add labels to client function prototypes Steve Dickson
2013-05-02 17:19 ` [PATCH 12/17] NFS: Add label lifecycle management Steve Dickson
2013-05-02 17:19 ` [PATCH 13/17] NFS: Client implementation of Labeled-NFS Steve Dickson
2013-05-04 19:26   ` J. Bruce Fields
2013-05-06  8:17     ` James Morris
2013-05-02 17:19 ` [PATCH 14/17] NFS: Extend NFS xattr handlers to accept the security namespace Steve Dickson
2013-05-02 23:37   ` James Morris
2013-05-02 17:19 ` [PATCH 15/17] Kconfig: Add Kconfig entry for Labeled NFS V4 client Steve Dickson
2013-05-02 17:19 ` [PATCH 16/17] NFSD: Server implementation of MAC Labeling Steve Dickson
     [not found]   ` <1367515151-31015-17-git-send-email-SteveD-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-05-09  1:50     ` J. Bruce Fields
     [not found]       ` <20130509015033.GI23747-uC3wQj2KruNg9hUCZPvPmw@public.gmane.org>
2013-05-10  1:01         ` J. Bruce Fields
2013-05-11 15:19       ` Steve Dickson
2013-05-11 18:33         ` J. Bruce Fields
2013-05-11 21:44       ` Steve Dickson
     [not found]         ` <518EBBD4.7010306-AfCzQyP5zfLQT0dZR+AlfA@public.gmane.org>
2013-05-11 22:57           ` J. Bruce Fields
2013-05-02 17:19 ` [PATCH 17/17] Kconfig: Add Kconfig entry for Labeled NFS V4 server Steve Dickson
2013-05-04  4:17 ` Ric Wheeler [this message]
2013-05-06  8:19   ` [PATCH 00/17] lnfs: linux-3.9 release James Morris
     [not found]     ` <alpine.LRH.2.02.1305061817290.28613-CK9fWmtY32x9JUWOpEiw7w@public.gmane.org>
2013-05-06  8:50       ` Ric Wheeler
     [not found]   ` <51848BE0.2080901-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-05-06 15:53     ` James Bottomley
2013-05-06 19:56       ` Ric Wheeler
2013-05-06 20:25         ` James Bottomley
2013-05-12 21:56           ` David Quigley
2013-05-13 13:00             ` Vu, Joseph

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=51848BE0.2080901@redhat.com \
    --to=rwheeler@redhat.com \
    --cc=SteveD@redhat.com \
    --cc=Trond.Myklebust@netapp.com \
    --cc=bfields@redhat.com \
    --cc=dpquigl@tycho.nsa.gov \
    --cc=jrieden@redhat.com \
    --cc=linux-fsdevel@vger.kernel.org \
    --cc=linux-nfs@vger.kernel.org \
    --cc=linux-security-module@vger.kernel.org \
    --cc=selinux@tycho.nsa.gov \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).