From: Ric Wheeler <rwheeler@redhat.com>
To: Steve Dickson <SteveD@redhat.com>,
Trond Myklebust <Trond.Myklebust@netapp.com>,
"J. Bruce Fields" <bfields@redhat.com>,
"David P. Quigley" <dpquigl@tycho.nsa.gov>,
Linux NFS list <linux-nfs@vger.kernel.org>,
Linux FS devel list <linux-fsdevel@vger.kernel.org>
Cc: Linux Security List <linux-security-module@vger.kernel.org>,
SELinux List <selinux@tycho.nsa.gov>,
Jack Rieden <jrieden@redhat.com>
Subject: Re: [PATCH 00/17] lnfs: linux-3.9 release
Date: Sat, 04 May 2013 07:17:36 +0300 [thread overview]
Message-ID: <51848BE0.2080901@redhat.com> (raw)
In-Reply-To: <1367515151-31015-1-git-send-email-SteveD@redhat.com>
On 05/02/2013 08:18 PM, Steve Dickson wrote:
> From: Steve Dickson <steved@redhat.com>
>
> Here is an the next rlease of the label NFS patches
> ported to the linux-3.9 release
>
> The following changes were made from the previous release.
> (Note, only the server patch changed in this release)
>
> * Remove the buffer overflow in the allocation of labels.
>
> * Removed needless char * casting
>
> * Removed the -EMSGSIZE to nfs4err_badlabel errno mapping
> by changing the return value of nfsd4_label_alloc() to
> be a _be32 value.
It would be great to see this patch series land in time for 3.10 - seems like a
major feature that has had been held in development for years and it does have a
very interested user base waiting for this to land.
Are there any existing roadblocks to having this make it this merge window?
Thanks!
Ric
>
>
> David Quigley (12):
> Security: Add hook to calculate context based on a negative dentry.
> Security: Add Hook to test if the particular xattr is part of a MAC
> model.
> LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount
> data.
> SELinux: Add new labeling type native labels
> NFSv4: Add label recommended attribute and NFSv4 flags
> NFSv4: Introduce new label structure
> NFSv4: Extend fattr bitmaps to support all 3 words
> NFS:Add labels to client function prototypes
> NFS: Add label lifecycle management
> NFS: Client implementation of Labeled-NFS
> NFS: Extend NFS xattr handlers to accept the security namespace
> NFSD: Server implementation of MAC Labeling
>
> Steve Dickson (5):
> NFSv4.2: Added v4.2 error codes
> NFSv4.2: Added NFS v4.2 support to the NFS client
> NFSDv4.2: Added NFS v4.2 support to the NFS server
> Kconfig: Add Kconfig entry for Labeled NFS V4 client
> Kconfig: Add Kconfig entry for Labeled NFS V4 server
>
> fs/nfs/Kconfig | 28 ++
> fs/nfs/callback.c | 1 +
> fs/nfs/client.c | 2 +-
> fs/nfs/dir.c | 46 ++-
> fs/nfs/getroot.c | 2 +-
> fs/nfs/inode.c | 133 ++++++--
> fs/nfs/namespace.c | 2 +-
> fs/nfs/nfs3acl.c | 4 +-
> fs/nfs/nfs3proc.c | 41 +--
> fs/nfs/nfs4_fs.h | 8 +-
> fs/nfs/nfs4client.c | 5 +
> fs/nfs/nfs4namespace.c | 2 +-
> fs/nfs/nfs4proc.c | 596 ++++++++++++++++++++++++++++++++----
> fs/nfs/nfs4xdr.c | 188 +++++++++---
> fs/nfs/pnfs.c | 2 +-
> fs/nfs/proc.c | 15 +-
> fs/nfs/super.c | 24 +-
> fs/nfsd/Kconfig | 16 +
> fs/nfsd/nfs4proc.c | 41 +++
> fs/nfsd/nfs4xdr.c | 124 +++++++-
> fs/nfsd/nfsd.h | 22 +-
> fs/nfsd/vfs.c | 28 ++
> fs/nfsd/vfs.h | 2 +
> fs/nfsd/xdr4.h | 3 +
> include/linux/nfs4.h | 20 ++
> include/linux/nfs_fs.h | 40 ++-
> include/linux/nfs_fs_sb.h | 10 +-
> include/linux/nfs_xdr.h | 30 +-
> include/linux/security.h | 57 +++-
> include/uapi/linux/nfs4.h | 2 +-
> security/capability.c | 19 +-
> security/security.c | 24 +-
> security/selinux/hooks.c | 92 +++++-
> security/selinux/include/security.h | 2 +
> security/selinux/ss/policydb.c | 5 +-
> security/smack/smack_lsm.c | 11 +
> 36 files changed, 1427 insertions(+), 220 deletions(-)
>
next prev parent reply other threads:[~2013-05-04 4:17 UTC|newest]
Thread overview: 39+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-05-02 17:18 [PATCH 00/17] lnfs: linux-3.9 release Steve Dickson
2013-05-02 17:18 ` [PATCH 01/17] NFSv4.2: Added v4.2 error codes Steve Dickson
2013-05-02 17:18 ` [PATCH 02/17] NFSv4.2: Added NFS v4.2 support to the NFS client Steve Dickson
[not found] ` <1367515151-31015-1-git-send-email-SteveD-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-05-02 17:18 ` [PATCH 03/17] NFSDv4.2: Added NFS v4.2 support to the NFS server Steve Dickson
2013-05-02 17:18 ` [PATCH 04/17] Security: Add hook to calculate context based on a negative dentry Steve Dickson
2013-05-02 23:36 ` James Morris
2013-05-02 17:18 ` [PATCH 05/17] Security: Add Hook to test if the particular xattr is part of a MAC model Steve Dickson
2013-05-02 23:36 ` James Morris
2013-05-02 17:19 ` [PATCH 06/17] LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount data Steve Dickson
2013-05-02 23:37 ` James Morris
2013-05-02 17:19 ` [PATCH 07/17] SELinux: Add new labeling type native labels Steve Dickson
[not found] ` <1367515151-31015-8-git-send-email-SteveD-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-05-02 23:37 ` James Morris
2013-05-02 17:19 ` [PATCH 08/17] NFSv4: Add label recommended attribute and NFSv4 flags Steve Dickson
2013-05-02 17:19 ` [PATCH 09/17] NFSv4: Introduce new label structure Steve Dickson
2013-05-02 17:19 ` [PATCH 10/17] NFSv4: Extend fattr bitmaps to support all 3 words Steve Dickson
2013-05-02 17:19 ` [PATCH 11/17] NFS:Add labels to client function prototypes Steve Dickson
2013-05-02 17:19 ` [PATCH 12/17] NFS: Add label lifecycle management Steve Dickson
2013-05-02 17:19 ` [PATCH 13/17] NFS: Client implementation of Labeled-NFS Steve Dickson
2013-05-04 19:26 ` J. Bruce Fields
2013-05-06 8:17 ` James Morris
2013-05-02 17:19 ` [PATCH 14/17] NFS: Extend NFS xattr handlers to accept the security namespace Steve Dickson
2013-05-02 23:37 ` James Morris
2013-05-02 17:19 ` [PATCH 15/17] Kconfig: Add Kconfig entry for Labeled NFS V4 client Steve Dickson
2013-05-02 17:19 ` [PATCH 16/17] NFSD: Server implementation of MAC Labeling Steve Dickson
[not found] ` <1367515151-31015-17-git-send-email-SteveD-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-05-09 1:50 ` J. Bruce Fields
[not found] ` <20130509015033.GI23747-uC3wQj2KruNg9hUCZPvPmw@public.gmane.org>
2013-05-10 1:01 ` J. Bruce Fields
2013-05-11 15:19 ` Steve Dickson
2013-05-11 18:33 ` J. Bruce Fields
2013-05-11 21:44 ` Steve Dickson
[not found] ` <518EBBD4.7010306-AfCzQyP5zfLQT0dZR+AlfA@public.gmane.org>
2013-05-11 22:57 ` J. Bruce Fields
2013-05-02 17:19 ` [PATCH 17/17] Kconfig: Add Kconfig entry for Labeled NFS V4 server Steve Dickson
2013-05-04 4:17 ` Ric Wheeler [this message]
2013-05-06 8:19 ` [PATCH 00/17] lnfs: linux-3.9 release James Morris
[not found] ` <alpine.LRH.2.02.1305061817290.28613-CK9fWmtY32x9JUWOpEiw7w@public.gmane.org>
2013-05-06 8:50 ` Ric Wheeler
[not found] ` <51848BE0.2080901-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>
2013-05-06 15:53 ` James Bottomley
2013-05-06 19:56 ` Ric Wheeler
2013-05-06 20:25 ` James Bottomley
2013-05-12 21:56 ` David Quigley
2013-05-13 13:00 ` Vu, Joseph
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=51848BE0.2080901@redhat.com \
--to=rwheeler@redhat.com \
--cc=SteveD@redhat.com \
--cc=Trond.Myklebust@netapp.com \
--cc=bfields@redhat.com \
--cc=dpquigl@tycho.nsa.gov \
--cc=jrieden@redhat.com \
--cc=linux-fsdevel@vger.kernel.org \
--cc=linux-nfs@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).