From: "David P. Quigley" <selinux@davequigley.com>
To: "J. Bruce Fields" <bfields@fieldses.org>
Cc: David Quigley <dpquigl@davequigley.com>,
trond.myklebust@netapp.com, sds@tycho.nsa.gov,
linux-nfs@vger.kernel.org, selinux@tycho.nsa.gov,
linux-security-module@vger.kernel.org,
"Matthew N. Dodd" <Matthew.Dodd@sparta.com>,
Miguel Rodel Felipe <Rodel_FM@dsi.a-star.edu.sg>,
Phua Eu Gene <PHUA_Eu_Gene@dsi.a-star.edu.sg>,
Khin Mi Mi Aung <Mi_Mi_AUNG@dsi.a-star.edu.sg>
Subject: Re: [PATCH 10/13] NFS: Add label lifecycle management
Date: Mon, 12 Nov 2012 10:36:35 -0500 [thread overview]
Message-ID: <50A11783.6090105@davequigley.com> (raw)
In-Reply-To: <20121112153314.GI30713@fieldses.org>
On 11/12/2012 10:33 AM, J. Bruce Fields wrote:
> On Mon, Nov 12, 2012 at 01:15:44AM -0500, David Quigley wrote:
>> > From David Quigley<dpquigl@davequigley.com>
>>
>> This patch adds the lifecycle management for the security label structure
>> introduced in an earlier patch. The label is not used yet but allocations and
>> freeing of the structure is handled.
>>
>> Signed-off-by: Matthew N. Dodd<Matthew.Dodd@sparta.com>
>> Signed-off-by: Miguel Rodel Felipe<Rodel_FM@dsi.a-star.edu.sg>
>> Signed-off-by: Phua Eu Gene<PHUA_Eu_Gene@dsi.a-star.edu.sg>
>> Signed-off-by: Khin Mi Mi Aung<Mi_Mi_AUNG@dsi.a-star.edu.sg>
>> Signed-off-by: David Quigley<dpquigl@davequigley.com>
>> ---
>> fs/nfs/dir.c | 30 +++++++++++++-
>> fs/nfs/getroot.c | 1 -
>> fs/nfs/inode.c | 13 ++++++
>> fs/nfs/nfs4proc.c | 116 +++++++++++++++++++++++++++++++++++++++++++++++++++++-
>> 4 files changed, 156 insertions(+), 4 deletions(-)
>>
>> diff --git a/fs/nfs/dir.c b/fs/nfs/dir.c
>> index 1339e44..561d2fb 100644
>> --- a/fs/nfs/dir.c
>> +++ b/fs/nfs/dir.c
>> @@ -581,7 +581,8 @@ int nfs_readdir_xdr_to_array(nfs_readdir_descriptor_t *desc, struct page *page,
>> entry.fh = nfs_alloc_fhandle();
>> entry.fattr = nfs_alloc_fattr();
>> entry.server = NFS_SERVER(inode);
>> - if (entry.fh == NULL || entry.fattr == NULL)
>> + entry.label = nfs4_label_alloc(GFP_NOWAIT);
>> + if (entry.fh == NULL || entry.fattr == NULL || entry.label == NULL)
>> goto out;
>>
>> array = nfs_readdir_get_array(page);
>> @@ -616,6 +617,7 @@ out_release_array:
>> out:
>> nfs_free_fattr(entry.fattr);
>> nfs_free_fhandle(entry.fh);
>> + nfs4_label_free(entry.label);
>> return status;
>> }
>>
>> @@ -1077,6 +1079,14 @@ static int nfs_lookup_revalidate(struct dentry *dentry, unsigned int flags)
>> if (fhandle == NULL || fattr == NULL)
>> goto out_error;
>>
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (nfs_server_capable(dir, NFS_CAP_SECURITY_LABEL)) {
>> + label = nfs4_label_alloc(GFP_NOWAIT);
>> + if (label == NULL)
>> + goto out_error;
>> + }
>> +#endif
> We usually try to avoid sprinkling too many #ifdef's around the code.
> Do we really need these? (E.g. can't we ensure that
> nfs_server_capable() will return the right thing when labelled NFS is
> compiled out?)
>
> --b.
That is probably a better way of handling this. We'll look into putting
the check into nfs_server_capable instead.
>> +
>> error = NFS_PROTO(dir)->lookup(dir,&dentry->d_name, fhandle, fattr, label);
>> if (error)
>> goto out_bad;
>> @@ -1087,6 +1097,12 @@ static int nfs_lookup_revalidate(struct dentry *dentry, unsigned int flags)
>>
>> nfs_free_fattr(fattr);
>> nfs_free_fhandle(fhandle);
>> +
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (nfs_server_capable(dir, NFS_CAP_SECURITY_LABEL))
>> + nfs4_label_free(label);
>> +#endif
>> +
>> out_set_verifier:
>> nfs_set_verifier(dentry, nfs_save_change_attribute(dir));
>> out_valid:
>> @@ -1123,6 +1139,7 @@ out_zap_parent:
>> out_error:
>> nfs_free_fattr(fattr);
>> nfs_free_fhandle(fhandle);
>> + nfs4_label_free(label);
>> dput(parent);
>> dfprintk(LOOKUPCACHE, "NFS: %s(%s/%s) lookup returned error %d\n",
>> __func__, dentry->d_parent->d_name.name,
>> @@ -1235,6 +1252,13 @@ struct dentry *nfs_lookup(struct inode *dir, struct dentry * dentry, unsigned in
>> if (fhandle == NULL || fattr == NULL)
>> goto out;
>>
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (nfs_server_capable(dir, NFS_CAP_SECURITY_LABEL)) {
>> + label = nfs4_label_alloc(GFP_NOWAIT);
>> + if (label == NULL)
>> + goto out;
>> + }
>> +#endif
>> parent = dentry->d_parent;
>> /* Protect against concurrent sillydeletes */
>> nfs_block_sillyrename(parent);
>> @@ -1264,6 +1288,10 @@ no_entry:
>> out_unblock_sillyrename:
>> nfs_unblock_sillyrename(parent);
>> out:
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (nfs_server_capable(dir, NFS_CAP_SECURITY_LABEL))
>> + nfs4_label_free(label);
>> +#endif
>> nfs_free_fattr(fattr);
>> nfs_free_fhandle(fhandle);
>> return res;
>> diff --git a/fs/nfs/getroot.c b/fs/nfs/getroot.c
>> index 3b68bb6..14bd667 100644
>> --- a/fs/nfs/getroot.c
>> +++ b/fs/nfs/getroot.c
>> @@ -75,7 +75,6 @@ struct dentry *nfs_get_root(struct super_block *sb, struct nfs_fh *mntfh,
>> struct nfs_fsinfo fsinfo;
>> struct dentry *ret;
>> struct inode *inode;
>> - struct nfs4_label *label = NULL;
>> void *name = kstrdup(devname, GFP_KERNEL);
>> int error;
>>
>> diff --git a/fs/nfs/inode.c b/fs/nfs/inode.c
>> index daca08c..ab08d0d 100644
>> --- a/fs/nfs/inode.c
>> +++ b/fs/nfs/inode.c
>> @@ -835,6 +835,15 @@ __nfs_revalidate_inode(struct nfs_server *server, struct inode *inode)
>> goto out;
>>
>> nfs_inc_stats(inode, NFSIOS_INODEREVALIDATE);
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (nfs_server_capable(inode, NFS_CAP_SECURITY_LABEL)) {
>> + label = nfs4_label_alloc(GFP_KERNEL);
>> + if (label == NULL) {
>> + status = -ENOMEM;
>> + goto out;
>> + }
>> + }
>> +#endif
>> status = NFS_PROTO(inode)->getattr(server, NFS_FH(inode), fattr, label);
>> if (status != 0) {
>> dfprintk(PAGECACHE, "nfs_revalidate_inode: (%s/%Ld) getattr failed, error=%d\n",
>> @@ -864,6 +873,10 @@ __nfs_revalidate_inode(struct nfs_server *server, struct inode *inode)
>> (long long)NFS_FILEID(inode));
>>
>> out:
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (nfs_server_capable(inode, NFS_CAP_SECURITY_LABEL))
>> + nfs4_label_free(label);
>> +#endif
>> nfs_free_fattr(fattr);
>> return status;
>> }
>> diff --git a/fs/nfs/nfs4proc.c b/fs/nfs/nfs4proc.c
>> index 8e0378c..4ab2738 100644
>> --- a/fs/nfs/nfs4proc.c
>> +++ b/fs/nfs/nfs4proc.c
>> @@ -865,9 +865,16 @@ static struct nfs4_opendata *nfs4_opendata_alloc(struct dentry *dentry,
>> p = kzalloc(sizeof(*p), gfp_mask);
>> if (p == NULL)
>> goto err;
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (server->caps& NFS_CAP_SECURITY_LABEL) {
>> + p->f_label = nfs4_label_alloc(gfp_mask);
>> + if (p->f_label == NULL)
>> + goto err_free_p;
>> + }
>> +#endif
>> p->o_arg.seqid = nfs_alloc_seqid(&sp->so_seqid, gfp_mask);
>> if (p->o_arg.seqid == NULL)
>> - goto err_free;
>> + goto err_free_label;
>> nfs_sb_active(dentry->d_sb);
>> p->dentry = dget(dentry);
>> p->dir = parent;
>> @@ -910,7 +917,13 @@ static struct nfs4_opendata *nfs4_opendata_alloc(struct dentry *dentry,
>> nfs4_init_opendata_res(p);
>> kref_init(&p->kref);
>> return p;
>> -err_free:
>> +
>> +err_free_label:
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (server->caps& NFS_CAP_SECURITY_LABEL)
>> + nfs4_label_free(p->f_label);
>> +#endif
>> +err_free_p:
>> kfree(p);
>> err:
>> dput(parent);
>> @@ -927,6 +940,10 @@ static void nfs4_opendata_free(struct kref *kref)
>> if (p->state != NULL)
>> nfs4_put_open_state(p->state);
>> nfs4_put_state_owner(p->owner);
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (p->o_arg.server->caps& NFS_CAP_SECURITY_LABEL)
>> + nfs4_label_free(p->f_label);
>> +#endif
>> dput(p->dir);
>> dput(p->dentry);
>> nfs_sb_deactive(sb);
>> @@ -1998,6 +2015,16 @@ static int _nfs4_do_open(struct inode *dir,
>> if (opendata == NULL)
>> goto err_put_state_owner;
>>
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (label&& nfs_server_capable(dir, NFS_CAP_SECURITY_LABEL)) {
>> + olabel = nfs4_label_alloc(GFP_KERNEL);
>> + if (olabel == NULL) {
>> + status = -ENOMEM;
>> + goto err_opendata_put;
>> + }
>> + }
>> +#endif
>> +
>> if (ctx_th&& server->attr_bitmask[2]& FATTR4_WORD2_MDSTHRESHOLD) {
>> opendata->f_attr.mdsthreshold = pnfs_mdsthreshold_alloc();
>> if (!opendata->f_attr.mdsthreshold)
>> @@ -2041,6 +2068,10 @@ static int _nfs4_do_open(struct inode *dir,
>> kfree(opendata->f_attr.mdsthreshold);
>> opendata->f_attr.mdsthreshold = NULL;
>>
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (nfs_server_capable(dir, NFS_CAP_SECURITY_LABEL))
>> + nfs4_label_free(olabel);
>> +#endif
>> nfs4_opendata_put(opendata);
>> nfs4_put_state_owner(sp);
>> *res = state;
>> @@ -2607,6 +2638,12 @@ static int nfs4_proc_get_root(struct nfs_server *server, struct nfs_fh *mntfh,
>> return error;
>> }
>>
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + label = nfs4_label_alloc(GFP_KERNEL);
>> + if (label == NULL)
>> + return -ENOMEM;
>> +#endif
>> +
>> error = nfs4_proc_getattr(server, mntfh, fattr, label);
>> if (error< 0) {
>> dprintk("nfs4_get_root: getattr error = %d\n", -error);
>> @@ -2617,6 +2654,11 @@ static int nfs4_proc_get_root(struct nfs_server *server, struct nfs_fh *mntfh,
>> !nfs_fsid_equal(&server->fsid,&fattr->fsid))
>> memcpy(&server->fsid,&fattr->fsid, sizeof(server->fsid));
>>
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (server->caps& NFS_CAP_SECURITY_LABEL)
>> + nfs4_label_free(label);
>> +#endif
>> +
>> return error;
>> }
>>
>> @@ -2728,6 +2770,10 @@ nfs4_proc_setattr(struct dentry *dentry, struct nfs_fattr *fattr,
>> if (pnfs_ld_layoutret_on_setattr(inode))
>> pnfs_return_layout(inode);
>>
>> + olabel = nfs4_label_alloc(GFP_KERNEL);
>> + if (olabel == NULL)
>> + return -ENOMEM;
>> +
>> nfs_fattr_init(fattr);
>>
>> /* Deal with open(O_TRUNC) */
>> @@ -2905,12 +2951,27 @@ static int _nfs4_proc_access(struct inode *inode, struct nfs_access_entry *entry
>> res.fattr = nfs_alloc_fattr();
>> if (res.fattr == NULL)
>> return -ENOMEM;
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (server->caps& NFS_CAP_SECURITY_LABEL) {
>> + res.label = nfs4_label_alloc(GFP_KERNEL);
>> + if (res.label == NULL) {
>> + status = -ENOMEM;
>> + goto out;
>> + }
>> + }
>> +#endif
>>
>> status = nfs4_call_sync(server->client, server,&msg,&args.seq_args,&res.seq_res, 0);
>> if (!status) {
>> nfs_access_set_mask(entry, res.access);
>> nfs_refresh_inode(inode, res.fattr, res.label);
>> }
>> +
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (server->caps& NFS_CAP_SECURITY_LABEL)
>> + nfs4_label_free(res.label);
>> +#endif
>> +out:
>> nfs_free_fattr(res.fattr);
>> return status;
>> }
>> @@ -3034,6 +3095,7 @@ static int _nfs4_proc_remove(struct inode *dir, struct qstr *name)
>> status = nfs4_call_sync(server->client, server,&msg,&args.seq_args,&res.seq_res, 1);
>> if (status == 0)
>> update_changeattr(dir,&res.cinfo);
>> +
>> return status;
>> }
>>
>> @@ -3079,6 +3141,7 @@ static int nfs4_proc_unlink_done(struct rpc_task *task, struct inode *dir)
>> if (nfs4_async_handle_error(task, res->server, NULL) == -EAGAIN)
>> return 0;
>> update_changeattr(dir,&res->cinfo);
>> +
>> return 1;
>> }
>>
>> @@ -3139,12 +3202,33 @@ static int _nfs4_proc_rename(struct inode *old_dir, struct qstr *old_name,
>> .rpc_resp =&res,
>> };
>> int status = -ENOMEM;
>> +
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (server->caps& NFS_CAP_SECURITY_LABEL) {
>> + res.old_label = nfs4_label_alloc(GFP_NOWAIT);
>> + if (res.old_label == NULL)
>> + goto out;
>> + res.new_label = nfs4_label_alloc(GFP_NOWAIT);
>> + if (res.new_label == NULL) {
>> + nfs4_label_free(res.old_label);
>> + goto out;
>> + }
>> + }
>> +#endif
>>
>> status = nfs4_call_sync(server->client, server,&msg,&arg.seq_args,&res.seq_res, 1);
>> if (!status) {
>> update_changeattr(old_dir,&res.old_cinfo);
>> update_changeattr(new_dir,&res.new_cinfo);
>> }
>> +
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (server->caps& NFS_CAP_SECURITY_LABEL) {
>> + nfs4_label_free(res.old_label);
>> + nfs4_label_free(res.new_label);
>> + }
>> +#endif
>> +out:
>> return status;
>> }
>>
>> @@ -3186,11 +3270,25 @@ static int _nfs4_proc_link(struct inode *inode, struct inode *dir, struct qstr *
>> if (res.fattr == NULL)
>> goto out;
>>
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (server->caps& NFS_CAP_SECURITY_LABEL) {
>> + res.label = nfs4_label_alloc(GFP_KERNEL);
>> + if (res.label == NULL)
>> + goto out;
>> + }
>> +#endif
>> +
>> status = nfs4_call_sync(server->client, server,&msg,&arg.seq_args,&res.seq_res, 1);
>> if (!status) {
>> update_changeattr(dir,&res.cinfo);
>> nfs_post_op_update_inode(inode, res.fattr, res.label);
>> }
>> +
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (server->caps& NFS_CAP_SECURITY_LABEL)
>> + nfs4_label_free(res.label);
>> +#endif
>> +
>> out:
>> nfs_free_fattr(res.fattr);
>> return status;
>> @@ -3226,6 +3324,13 @@ static struct nfs4_createdata *nfs4_alloc_createdata(struct inode *dir,
>> if (data != NULL) {
>> struct nfs_server *server = NFS_SERVER(dir);
>>
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (server->caps& NFS_CAP_SECURITY_LABEL) {
>> + data->label = nfs4_label_alloc(GFP_KERNEL);
>> + if (data->label == NULL)
>> + goto out_free;
>> + }
>> +#endif
>> data->msg.rpc_proc =&nfs4_procedures[NFSPROC4_CLNT_CREATE];
>> data->msg.rpc_argp =&data->arg;
>> data->msg.rpc_resp =&data->res;
>> @@ -3242,6 +3347,9 @@ static struct nfs4_createdata *nfs4_alloc_createdata(struct inode *dir,
>> nfs_fattr_init(data->res.fattr);
>> }
>> return data;
>> +out_free:
>> + kfree(data);
>> + return NULL;
>> }
>>
>> static int nfs4_do_create(struct inode *dir, struct dentry *dentry, struct nfs4_createdata *data)
>> @@ -3257,6 +3365,10 @@ static int nfs4_do_create(struct inode *dir, struct dentry *dentry, struct nfs4_
>>
>> static void nfs4_free_createdata(struct nfs4_createdata *data)
>> {
>> +#ifdef CONFIG_NFS_V4_SECURITY_LABEL
>> + if (data->arg.server->caps& NFS_CAP_SECURITY_LABEL)
>> + nfs4_label_free(data->label);
>> +#endif
>> kfree(data);
>> }
>>
>> --
>> 1.7.11.7
>>
next prev parent reply other threads:[~2012-11-12 15:43 UTC|newest]
Thread overview: 92+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-11-12 6:15 Labeled NFS [v5] David Quigley
2012-11-12 6:15 ` [PATCH 01/13] Security: Add hook to calculate context based on a negative dentry David Quigley
2012-11-12 12:13 ` J. Bruce Fields
2012-11-12 14:52 ` Dave Quigley
2012-11-12 6:15 ` [PATCH 02/13] Security: Add Hook to test if the particular xattr is part of a MAC model David Quigley
2012-11-12 12:15 ` J. Bruce Fields
2012-11-12 14:56 ` Dave Quigley
2012-11-12 16:36 ` J. Bruce Fields
2012-11-12 19:36 ` David P. Quigley
2012-11-12 21:43 ` J. Bruce Fields
2012-11-13 0:12 ` Dave Quigley
2012-11-12 6:15 ` [PATCH 03/13] LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount data David Quigley
2012-11-12 6:15 ` [PATCH 04/13] SELinux: Add new labeling type native labels David Quigley
2012-11-12 6:15 ` [PATCH 05/13] KConfig: Add KConfig entries for Labeled NFS David Quigley
2012-11-12 14:45 ` J. Bruce Fields
2012-11-12 14:57 ` Dave Quigley
2012-11-12 6:15 ` [PATCH 06/13] NFSv4: Add label recommended attribute and NFSv4 flags David Quigley
2012-11-12 6:15 ` [PATCH 07/13] NFSv4: Introduce new label structure David Quigley
2012-11-12 15:13 ` J. Bruce Fields
2012-11-12 15:32 ` David P. Quigley
2012-11-12 16:05 ` J. Bruce Fields
2012-11-12 16:53 ` David P. Quigley
2012-11-12 17:50 ` J. Bruce Fields
2012-11-12 6:15 ` [PATCH 08/13] NFSv4: Extend fattr bitmaps to support all 3 words David Quigley
2012-11-12 6:15 ` [PATCH 09/13] NFS:Add labels to client function prototypes David Quigley
2012-11-12 6:15 ` [PATCH 10/13] NFS: Add label lifecycle management David Quigley
2012-11-12 15:33 ` J. Bruce Fields
2012-11-12 15:36 ` David P. Quigley [this message]
2012-11-12 6:15 ` [PATCH 11/13] NFS: Client implementation of Labeled-NFS David Quigley
2012-11-12 6:15 ` [PATCH 12/13] NFS: Extend NFS xattr handlers to accept the security namespace David Quigley
2012-11-12 6:15 ` [PATCH 13/13] NFSD: Server implementation of MAC Labeling David Quigley
2012-11-12 16:31 ` J. Bruce Fields
2012-11-12 15:23 ` Labeled NFS [v5] J. Bruce Fields
2012-11-12 15:34 ` David P. Quigley
2012-11-12 16:09 ` J. Bruce Fields
2012-11-12 20:56 ` Steve Dickson
2012-11-13 1:39 ` Dave Quigley
2012-11-13 12:55 ` Steve Dickson
2012-11-14 4:32 ` Dave Quigley
2012-11-14 13:45 ` J. Bruce Fields
2012-11-14 13:50 ` David Quigley
2012-11-14 13:59 ` J. Bruce Fields
2012-11-14 14:01 ` David Quigley
2012-11-14 14:04 ` David Quigley
2012-11-14 14:24 ` J. Bruce Fields
2012-11-14 14:30 ` David Quigley
2012-11-15 16:00 ` Casey Schaufler
2012-11-15 20:28 ` David Quigley
2012-11-16 3:34 ` Casey Schaufler
2012-11-16 3:43 ` David Quigley
2012-11-16 4:58 ` Dave Quigley
2012-11-16 4:59 ` Dave Quigley
2012-11-14 13:56 ` David Quigley
2012-11-12 16:33 ` J. Bruce Fields
2012-11-12 20:44 ` Dave Quigley
2012-11-12 22:23 ` Casey Schaufler
2012-11-13 3:16 ` Dave Quigley
2012-11-20 21:09 ` Casey Schaufler
2012-11-21 0:04 ` Dave Quigley
2012-11-21 0:29 ` Dave Quigley
2012-11-21 0:32 ` Casey Schaufler
2012-11-21 0:37 ` Dave Quigley
2012-11-21 2:52 ` Casey Schaufler
2012-11-21 3:28 ` Dave Quigley
2012-11-28 18:57 ` Casey Schaufler
2012-11-29 1:14 ` Dave Quigley
2012-11-29 2:08 ` Casey Schaufler
2012-11-29 22:28 ` Casey Schaufler
2012-11-29 22:49 ` David Quigley
2012-11-30 0:02 ` David Quigley
2012-11-30 0:07 ` David Quigley
2012-11-30 0:34 ` Casey Schaufler
2012-11-30 0:46 ` David Quigley
2012-11-30 1:50 ` Casey Schaufler
2012-11-30 2:02 ` David Quigley
2012-11-30 12:14 ` J. Bruce Fields
2012-11-30 12:57 ` David Quigley
2012-11-30 13:17 ` David Quigley
2012-11-30 13:28 ` Stephen Smalley
2012-11-30 13:35 ` David Quigley
2012-11-30 13:50 ` Stephen Smalley
2012-11-30 14:02 ` David Quigley
2012-11-30 16:21 ` Casey Schaufler
2012-11-30 16:28 ` David Quigley
2012-12-03 18:27 ` Casey Schaufler
2012-11-30 16:55 ` J. Bruce Fields
2012-11-30 16:59 ` David Quigley
2012-11-30 13:20 ` David Quigley
-- strict thread matches above, loose matches on Subject: below --
2012-12-17 15:42 [PATCH 00/13] NFSv4: Label NFS Patches Steve Dickson
2012-12-17 15:43 ` [PATCH 10/13] NFS: Add label lifecycle management Steve Dickson
2013-05-13 19:11 [PATCH 00/13] lnfs: linux-3.10-rc1 release Steve Dickson
2013-05-13 19:11 ` [PATCH 10/13] NFS: Add label lifecycle management Steve Dickson
2013-05-16 15:56 Froe e71bf1d708e1294b3bae64d04f03228b3625f2a3 Mon Sep 17 00:00:00 2001 Steve Dickson
2013-05-16 15:56 ` [PATCH 10/13] NFS: Add label lifecycle management Steve Dickson
2013-05-22 16:50 [PATCH 00/13] lnfs: 3.10-rc2 release Steve Dickson
2013-05-22 16:50 ` [PATCH 10/13] NFS: Add label lifecycle management Steve Dickson
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=50A11783.6090105@davequigley.com \
--to=selinux@davequigley.com \
--cc=Matthew.Dodd@sparta.com \
--cc=Mi_Mi_AUNG@dsi.a-star.edu.sg \
--cc=PHUA_Eu_Gene@dsi.a-star.edu.sg \
--cc=Rodel_FM@dsi.a-star.edu.sg \
--cc=bfields@fieldses.org \
--cc=dpquigl@davequigley.com \
--cc=linux-nfs@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=sds@tycho.nsa.gov \
--cc=selinux@tycho.nsa.gov \
--cc=trond.myklebust@netapp.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).