Re: [PATCH] remove sys_security

Stephen Smalley
2002-10-23T16:45:30Z

On Wed, 23 Oct 2002, Christoph Hellwig wrote:

> Why are you limited to a single fs? xfs and jfs have xattr support
> out of the box (in 2.4 only jfs is actually in the mainline tree, though)

Most of our users (and we) happen to use ext[23], so there isn't any point
in migrating SELinux to using EAs until EA implementations are merged into
those filesystems. Also, the EA API lacks support for creating files with
specified security attributes (as opposed to creating and then calling
setxattr to change the attributes, possibly after someone has already
obtained access to the file), so it isn't ideal for our purposes anyway.

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com