On Tue, Feb 12, 2013 at 02:02:49PM -0800, Casey Schaufler wrote: > On 2/12/2013 1:41 PM, J. Bruce Fields wrote: > > On Fri, Feb 08, 2013 at 07:39:08AM -0500, Steve Dickson wrote: > >> include/linux/security.h | 57 +++- > > ... > >> security/capability.c | 19 +- > >> security/security.c | 24 +- > >> security/selinux/hooks.c | 92 +++++- > >> security/selinux/include/security.h | 2 + > >> security/selinux/ss/policydb.c | 5 +- > >> security/smack/smack_lsm.c | 11 + > >> 33 files changed, 1352 insertions(+), 214 deletions(-) > > Are we still waiting on ACKs from the security people for these bits? > > I'm not going to NAK it, because I don't know it won't work, > but I'm not going to ACK it either, because I have not been > able to get it to work. I have no idea what the problem > might be, and the "obvious" things we've tried have proven > ineffective. I may have a bad set of user space tools. There > may be more work on Smack hooks required. I can't tell, and > there's way too much NFS set-up involved to make progress in > the limited time I have available. > > If you're waiting for my ACK, no, you don't have it. > If you're OK with a lack of NAK, go ahead. There will > be changes someday I suspect, but I can't put this high > enough on my priorities to devote the time required > just now. OK, completely understood. We need someone to ack the security and selinux pieces, though. (That would be James, Stephen, or Eric?) --b. -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html