On Tue, Jan 22, 2013 at 08:40:28AM -0500, Steve Dickson wrote: > This is the latest version of the label NFS code that has > been forward ported to 3.8-rc3. I had a few comments on the David's previous posting, but none of them seem to be addressed here. Do you need me to go dig those up? --b. > > This release also contains the fix of not sleep while holding > the inode spin lock. > > The Fedora kernel rpms that have the patches are under > http://steved.fedorapeople.org/lnfs/kernels/ > > A wireshark rpm that can dissect the labels is under > http://steved.fedorapeople.org/lnfs/wireshark/ > > The actual patches from the release are under > http://steved.fedorapeople.org/lnfs/patches/v3.8-rc3-lnfs/ > > I did all my testing on Fedora 18, but I'm assuming these > rpms will work in on Fedora 17 as well. If that is not the > case please let me know. > > Dave Quigley (2): > NFS:Add labels to client function prototypes > NFS: Add label lifecycle management > > David Quigley (11): > Security: Add hook to calculate context based on a negative dentry. > Security: Add Hook to test if the particular xattr is part of a MAC > model. > LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount > data. > SELinux: Add new labeling type native labels > KConfig: Add KConfig entries for Labeled NFS > NFSv4: Add label recommended attribute and NFSv4 flags > NFSv4: Introduce new label structure > NFSv4: Extend fattr bitmaps to support all 3 words > NFS: Client implementation of Labeled-NFS > NFS: Extend NFS xattr handlers to accept the security namespace > NFSD: Server implementation of MAC Labeling > > Steve Dickson (1): > lnfs: Do not sleep holding the inode spin lock. > > fs/nfs/Kconfig | 16 + > fs/nfs/client.c | 2 +- > fs/nfs/dir.c | 49 ++- > fs/nfs/getroot.c | 2 +- > fs/nfs/inode.c | 146 +++++++-- > fs/nfs/namespace.c | 2 +- > fs/nfs/nfs3acl.c | 4 +- > fs/nfs/nfs3proc.c | 41 +-- > fs/nfs/nfs4_fs.h | 8 +- > fs/nfs/nfs4namespace.c | 2 +- > fs/nfs/nfs4proc.c | 574 ++++++++++++++++++++++++++++++++---- > fs/nfs/nfs4xdr.c | 198 ++++++++++--- > fs/nfs/proc.c | 15 +- > fs/nfs/super.c | 17 +- > fs/nfsd/Kconfig | 13 + > fs/nfsd/nfs4proc.c | 33 +++ > fs/nfsd/nfs4xdr.c | 115 +++++++- > fs/nfsd/nfsd.h | 8 +- > fs/nfsd/vfs.c | 31 ++ > fs/nfsd/vfs.h | 2 + > fs/nfsd/xdr4.h | 3 + > include/linux/nfs4.h | 9 + > include/linux/nfs_fs.h | 28 +- > include/linux/nfs_fs_sb.h | 10 +- > include/linux/nfs_xdr.h | 30 +- > include/linux/security.h | 57 +++- > include/uapi/linux/nfs4.h | 1 + > security/capability.c | 19 +- > security/security.c | 24 +- > security/selinux/hooks.c | 92 +++++- > security/selinux/include/security.h | 2 + > security/selinux/ss/policydb.c | 5 +- > security/smack/smack_lsm.c | 11 + > 33 files changed, 1366 insertions(+), 203 deletions(-) > > -- > 1.8.1 > -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
