public inbox for linux-nfs@vger.kernel.org
 help / color / mirror / Atom feed
From: Brad Boyer <flar@allandria.com>
To: James Morris <jmorris@namei.org>
Cc: linux-nfs@vger.kernel.org, linux-security-module@vger.kernel.org,
	Trond Myklebust <Trond.Myklebust@netapp.com>,
	"J. Bruce Fields" <bfields@fieldses.org>,
	Neil Brown <neilb@suse.de>,
	linux-fsdevel@vger.kernel.org
Subject: Re: [PATCH 0/6][v4][RFC] NFSv3: implement extended attribute protocol (XATTR)
Date: Mon, 8 Mar 2010 19:59:33 -0800	[thread overview]
Message-ID: <20100309035932.GA14237@cynthia.pants.nu> (raw)
In-Reply-To: <alpine.LRH.2.00.1003082122340.6314@tundra.namei.org>

On Mon, Mar 08, 2010 at 09:42:06PM +1100, James Morris wrote:
> Since the last version, I've incorporated feedback to add a new top-level 
> xattr namespace "nfsd", for storing client-origin xattrs on the server.  
> Support for the new namespace has been implemented on ext3 for testing 
> purposes.
> 
> Access to this namespace locally requires CAP_SYS_ADMIN, and it is not 
> accessible over the wire.  Note that there is still potential for 
> confusion between local and remote users, e.g.
> 
> $ setfattr -n user.foo -v bar file.txt
> 
> on an NFS mounted fs will create an xattr on the server called 
> nfsd.user.foo, and then if the user logs in locally, they will not see the 
> xattr at all.  Similarly, if they create xattrs locally, they will not be 
> exported via XATTR.
> 
> Comments welcome.

I personally think it's a bad idea to not map regular user xattr values
directly to what is local to the server. One common thing I've seen in
many places is to have local disks on various servers exported over
NFS to other servers, but the intent is that the user shouldn't care
which server physically hosts the storage. In this case, you want the
data to appear the same regardless of the use or non-use of NFS. In
this sort of situation, one system will see different data than the
others for the same files with the same access level. One possible
option would be to make it configurable, kind of like root_squash.

	Brad Boyer
	flar@allandria.com


  parent reply	other threads:[~2010-03-09  4:46 UTC|newest]

Thread overview: 32+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2010-02-26  4:33 [PATCH 0/5][v3][RFC] NFSv3: implement extended attribute protocol (XATTR) James Morris
2010-02-26  4:34 ` [PATCH 1/5] NFSv3: convert client to generic xattr API James Morris
2010-02-26  4:35 ` [PATCH 2/5] NFSv3: add xattr API config option for client James Morris
     [not found] ` <alpine.LRH.2.00.1002261457420.25193-CK9fWmtY32x9JUWOpEiw7w@public.gmane.org>
2010-02-26  4:36   ` Subject: [PATCH 3/5] NFSv3: add client implementation of XATTR protocol James Morris
2010-02-26  4:36 ` [PATCH 4/5] NFSv3: add server " James Morris
2010-02-26  4:37 ` [PATCH 5/5] NFSv3: Add server namespace support for XATTR protocol implementation James Morris
2010-02-26 13:46   ` Stephen Smalley
2010-03-01  0:49     ` Casey Schaufler
2010-03-01  1:17       ` Trond Myklebust
2010-03-01  8:09         ` James Morris
2010-03-08 10:42 ` [PATCH 0/6][v4][RFC] NFSv3: implement extended attribute protocol (XATTR) James Morris
2010-03-08 10:43   ` [PATCH 1/6] NFSv3: convert client to generic xattr API James Morris
2010-03-08 10:44   ` [PATCH 3/6] NFSv3: add client implementation of XATTR protocol James Morris
2010-03-08 10:45   ` [PATCH 4/6] NFSv3: add server " James Morris
2010-03-08 10:46   ` [PATCH 5/6] xattr: add new top level nfsd namespace and implement ext3 support James Morris
     [not found]   ` <alpine.LRH.2.00.1003082122340.6314-CK9fWmtY32x9JUWOpEiw7w@public.gmane.org>
2010-03-08 10:43     ` [PATCH 2/6] NFSv3: add xattr API config option for client James Morris
2010-03-08 10:47     ` [PATCH 6/6] NFSv3: Add server namespace support for XATTR protocol implementation James Morris
2010-03-09  3:59   ` Brad Boyer [this message]
2010-03-09  5:49     ` [PATCH 0/6][v4][RFC] NFSv3: implement extended attribute protocol (XATTR) Casey Schaufler
2010-03-09  7:04       ` Brad Boyer
2010-03-09 19:35         ` Jamie Lokier
2010-03-10  3:46           ` Casey Schaufler
2010-03-15  3:19             ` Jamie Lokier
2010-03-15  4:42               ` Casey Schaufler
2010-03-15 14:28                 ` Jamie Lokier
2010-03-15 23:28                   ` Casey Schaufler
2010-03-15 23:49                     ` Trond Myklebust
2010-03-16  2:31                       ` Casey Schaufler
2010-03-17 20:13       ` Eric Paris
2010-03-17 21:23         ` Casey Schaufler
2010-03-09  8:13     ` James Morris
2010-03-13  7:28       ` Brad Boyer

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20100309035932.GA14237@cynthia.pants.nu \
    --to=flar@allandria.com \
    --cc=Trond.Myklebust@netapp.com \
    --cc=bfields@fieldses.org \
    --cc=jmorris@namei.org \
    --cc=linux-fsdevel@vger.kernel.org \
    --cc=linux-nfs@vger.kernel.org \
    --cc=linux-security-module@vger.kernel.org \
    --cc=neilb@suse.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox