On 06/19/2015 03:09 PM, Andrew Holway wrote:
So how much of this got implemented? Whats the story with NFSv4? https://www.nsa.gov/research/_files/selinux/papers/nfsv3.pdf
The v3 work was experimental and there was no real way to upstream it in a compatible way.
Dave Quigley worked with the IETF on SELinux labeled NFS support for NFS 4.2 and it has been available since Fedora 20. This allows each file to have their own SELinux label on the server, but enforcement is only handled by the client.
-- James Carter <jwcart2@xxxxxxxxxxxxx> National Security Agency _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
