On 4/3/2012 6:03 PM, Casey Schaufler wrote:
On 4/3/2012 1:16 PM, David Quigley wrote:
A heads up for everyone who has been involved in the process. Take a
look and provide some comments if you'd like. I will be reviewing it
soon and providing my feedback.
Overall well done document.
Section 3.3 uses the term "context" differently than it is used in
sections 3.5.1 and 3.7.1.
It is not clear what comprises the "context" referenced in section 3.3.
The "security context" referenced in 3.5.1 and 3.7.1 may not translate
between client and server.
If the client is a strictly capability based Unix (e.g. Trusted Irix)
and the server SELinux the "security context" of the client may be
completely incomprehensible to the server.
Perhaps a change on the order of:
"Both the server and the client have MAC functionality enabled, and
full LNFS functionality is extended over the network between both client
and server."
to
"The server and the client have mutually recognized MAC
functionality enabled, and full LNFS functionality is extended over the
network between both client and server. "
And I've added the LSM list to the CC, as SELinux isn't the only
environment concerned with the outcome of Labeled NFS.
-------- Original Message --------
Subject: [nfsv4] Last call for "Requirements for Labeled NFS" - ends
on April 27th
Date: 04/03/2012 14:13
From: Spencer Shepler<sshepler@xxxxxxxxxxxxx>
To: "nfsv4@xxxxxxxx"<nfsv4@xxxxxxxx>
The following has been made available (Thanks Tom).
We are staring last call on this document and it will end on April 27th..
Please take the time to read and provide comments.
Note that this work is targeted as an informational RFC in preparation
for NFSv4.2 work.
Spencer
"Requirements for Labeled NFS"
draft-ietf-nfsv4-labreqs-00.txt
http://www.ietf.org/id/draft-ietf-nfsv4-labreqs-00.txt
_______________________________________________
nfsv4 mailing list
nfsv4@xxxxxxxx
https://www.ietf.org/mailman/listinfo/nfsv4
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to
majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
If possible post those comments on the IETF NFSv4 WG mailing list as
thats where comments are supposed to go. I'll relay your comments if
you'd like instead of joining the list yourself. There is still going to
be much discussion since this is just the requirements document. This is
what is necessary to be in the NFSv4.2 spec but isn't the extent of the
discussion.
Dave
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
