On Thu, 2010-07-08 at 09:23 +1000, James Morris wrote: > On Wed, 7 Jul 2010, David P. Quigley wrote: > > > There currently doesn't exist a labeling type that is adequate for use with > > labeled NFS. Since NFS doesn't really support xattrs we can't use the use xattr > > labeling behavior. For this we developed a new labeling type. The native > > labeling type is used solely by NFS to ensure NFS inodes are labeled at runtime > > by the NFS code instead of relying on the SELinux security server on the client > > end. > > It would be useful to have the ability to specify labeling behavior on a > per-mount basis, with the default remaining as genfs. > > Otherwise, this is a global policy decision which affects all NFSv4 > mounts, right? > > I don't believe we have that ability in any other file system. If you want to decide that you want to use genfs style labels on NFSv4 just use a context mount. That way you can have the default behavior be use security label support unless you don't want to and then you can have a context mount. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
