2012/6/13 David Quigley <selinux@xxxxxxxxxxxxxxx>: > On 06/05/2012 21:34, casinee app wrote: >> >> the NFS. I had applied a patch to the kernel to support the xattr of >> NFS filesystem. >> >> 2012/6/5 David Quigley <selinux@xxxxxxxxxxxxxxx> >> >>> On 06/05/2012 02:51, casinee app wrote: >>> >>>> Hi, >>>> when i execute #restorecon -R / , all the output is "... operation >>>> not support". I had check the source code, and in >>>> linux/security/selinux/hooks.c : >>>> >>>> ... >>>> sbsec = inode->i_sb->s_security; >>>> if (!(sbsec->flags & SE_SBLABELSUPP)) >>>> { >>>> return -EOPNOTSUPP; >>>> } >>>> ... >>>> it returned. The SE_SBLABELSUPP defined as 0x40, i want to know how >>>> can i do to make the filesystem to support the SecurityContext of >>>> selinux. >>>> Thanks. >>> >>> >>> Which filesystem is this? >>> >>> Dave > > > Where did you get this patch? Is it supposed to be generic xattr support in > NFS? if so what version? > I got the patch from the website http://namei.org/nfsxattr/ . After i applied the patch, when i config the kernel, i can see the options like this: ... <*> NFS client support [*] NFS client support for NFS version 3 [*] NFS client support for the NFSv3 ACL protocol extension [*] NFS client support for the NFSv3 XATTR protocol extension (EXPERIMENTAL) [*] Extended attributes in the user namespace (EXPERIMENTAL) [*] NFS client support for NFS version 4 (EXPERIMENTAL) [*] Root file system on NFS <M> NFS server support -*- NFS server support for NFS version 3 [*] NFS server support for the NFSv3 ACL protocol extension [*] NFS server support for the NFSv3 XATTR protocol extension (EXPERIMENTAL) [*] NFS server support for NFS version 4 (EXPERIMENTAL) > Dave > -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.