On Mon, May 13, 2013 at 03:11:44PM -0400, Steve Dickson wrote: > From: Steve Dickson <steved@xxxxxxxxxx> > > Here is an the next rlease of the label NFS patches > ported to the linux-3-10.rc1 release. Steve, note James Morris acked patches 1, 2, 3, 4, 11, and 12. Could you please add the Acked-by: James Morris <james.l.morris@xxxxxxxxxx> to those before the next resend? --b. > > Note, this release only include the security and > NFS client patches since the server patches have > already been merged into Bruce's tree... I did > uses those patches to test the release. > > Bruce, thank you very much for all you help! > > There were no functional changes in the security > patches. There were some simple merge conflicts > in a couple header files. > > The following has was changed in the client code > > * Labels were taken out of the cache consistency > bitmask. The means the ACCESS and DELEGRETURN > will no longer pass labels. > > * Looking to get the label out of the I/O path, > I found the follow ops allocate labels but never > process them (aka they never send a GETATTR in > the compound) > READ, CLOSE, REMOVE, RENAME. > > So the label code was be removed from those ops. > > So that leaves LOOKUP, READDIR, GETATTR, LINK, SETATTR, CREATE and OPEN > that will continue to pass labels... > > David Quigley (8): > Security: Add hook to calculate context based on a negative dentry. > Security: Add Hook to test if the particular xattr is part of a MAC > model. > LSM: Add flags field to security_sb_set_mnt_opts for in kernel mount > data. > SELinux: Add new labeling type native labels > NFSv4: Add label recommended attribute and NFSv4 flags > NFSv4: Introduce new label structure > NFSv4: Extend fattr bitmaps to support all 3 words > NFS: Extend NFS xattr handlers to accept the security namespace > > Steve Dickson (5): > NFSv4.2: Added NFS v4.2 support to the NFS client > NFS:Add labels to client function prototypes > NFS: Add label lifecycle management > NFS: Client implementation of Labeled-NFS > Kconfig: Add Kconfig entry for Labeled NFS V4 client > > fs/nfs/Kconfig | 28 ++ > fs/nfs/callback.c | 1 + > fs/nfs/callback_xdr.c | 6 +- > fs/nfs/client.c | 2 +- > fs/nfs/dir.c | 46 ++- > fs/nfs/getroot.c | 2 +- > fs/nfs/inode.c | 133 +++++++-- > fs/nfs/namespace.c | 2 +- > fs/nfs/nfs3acl.c | 4 +- > fs/nfs/nfs3proc.c | 41 +-- > fs/nfs/nfs4_fs.h | 8 +- > fs/nfs/nfs4client.c | 5 + > fs/nfs/nfs4namespace.c | 2 +- > fs/nfs/nfs4proc.c | 548 ++++++++++++++++++++++++++++++++---- > fs/nfs/nfs4xdr.c | 184 +++++++++--- > fs/nfs/proc.c | 15 +- > fs/nfs/super.c | 24 +- > include/linux/nfs4.h | 11 + > include/linux/nfs_fs.h | 30 +- > include/linux/nfs_fs_sb.h | 8 +- > include/linux/nfs_xdr.h | 30 +- > include/linux/security.h | 57 +++- > include/uapi/linux/nfs4.h | 2 +- > security/capability.c | 19 +- > security/security.c | 24 +- > security/selinux/hooks.c | 92 +++++- > security/selinux/include/security.h | 2 + > security/selinux/ss/policydb.c | 5 +- > security/smack/smack_lsm.c | 11 + > 29 files changed, 1132 insertions(+), 210 deletions(-) > > -- > 1.8.1.4 > > -- > To unsubscribe from this list: send the line "unsubscribe linux-nfs" in > the body of a message to majordomo@xxxxxxxxxxxxxxx > More majordomo info at http://vger.kernel.org/majordomo-info.html -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
