On Mon, Feb 18, 2013 at 01:47:42PM -0500, Steve Dickson wrote: > From: Steve Dickson <steved@xxxxxxxxxx> > > Here is the next release of the Label NFS patches, forward > ported to linux-3.8-rc7 > > I believe I've incorporated all code review that were made > from the last release, Except I think this doesn't turn on minor version 2? Also: did you figure out why NFSv4 wasn't working when the labeled NFS support is configured out? --b. > including reworking how the labels are > allocated and freed on both client and server. Thank you > for those cycles! > > I have every intention on bring these bits to next week's Connectathon > so hopefully we can resolve any outstanding issues before then, > if there are any... ;-) > > The Fedora kernel rpms that have the patches are under > http://steved.fedorapeople.org/lnfs/kernels/ > > A wireshark rpm that can dissect the labels is under > http://steved.fedorapeople.org/lnfs/wireshark/ > > The actual patches from this release are under > http://steved.fedorapeople.org/lnfs/patches/lnfs-v3.8-rc7 > > Dave Quigley (2): > NFS:Add labels to client function prototypes > NFS: Add label lifecycle management > > David Quigley (10): > Security: Add hook to calculate context based on a negative dentry. > Security: Add Hook to test if the particular xattr is part of a MAC > model. > LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount > data. > SELinux: Add new labeling type native labels > NFSv4: Add label recommended attribute and NFSv4 flags > NFSv4: Introduce new label structure > NFSv4: Extend fattr bitmaps to support all 3 words > NFS: Client implementation of Labeled-NFS > NFS: Extend NFS xattr handlers to accept the security namespace > NFSD: Server implementation of MAC Labeling > > Steve Dickson (2): > Kconfig: Add Kconfig entry for Labeled NFS V4 client > Kconfig: Add Kconfig entry for Labeled NFS V4 server > > fs/nfs/Kconfig | 18 ++ > fs/nfs/client.c | 2 +- > fs/nfs/dir.c | 46 ++- > fs/nfs/getroot.c | 2 +- > fs/nfs/inode.c | 129 +++++++-- > fs/nfs/namespace.c | 2 +- > fs/nfs/nfs3acl.c | 4 +- > fs/nfs/nfs3proc.c | 41 +-- > fs/nfs/nfs4_fs.h | 8 +- > fs/nfs/nfs4namespace.c | 2 +- > fs/nfs/nfs4proc.c | 563 ++++++++++++++++++++++++++++++++---- > fs/nfs/nfs4xdr.c | 192 +++++++++--- > fs/nfs/proc.c | 15 +- > fs/nfs/super.c | 17 +- > fs/nfsd/Kconfig | 16 + > fs/nfsd/nfs4proc.c | 41 +++ > fs/nfsd/nfs4xdr.c | 116 +++++++- > fs/nfsd/nfsd.h | 6 +- > fs/nfsd/vfs.c | 29 ++ > fs/nfsd/vfs.h | 2 + > fs/nfsd/xdr4.h | 3 + > include/linux/nfs4.h | 8 + > include/linux/nfs_fs.h | 30 +- > include/linux/nfs_fs_sb.h | 10 +- > include/linux/nfs_xdr.h | 30 +- > include/linux/security.h | 57 +++- > include/uapi/linux/nfs4.h | 2 +- > security/capability.c | 19 +- > security/security.c | 24 +- > security/selinux/hooks.c | 92 +++++- > security/selinux/include/security.h | 2 + > security/selinux/ss/policydb.c | 5 +- > security/smack/smack_lsm.c | 11 + > 33 files changed, 1333 insertions(+), 211 deletions(-) > > -- > 1.8.1.2 > -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html