On Thu, Feb 6, 2020 at 11:36 AM Stephen Smalley <sds@xxxxxxxxxxxxx> wrote: > > On 2/5/20 12:10 PM, Stephen Smalley wrote: > > On 1/30/20 3:22 PM, Stephen Smalley wrote: > >> In addition to testing full NFS security labeling support, > >> make sure that context mounts continue to work independent > >> of whether the mount was exported with security_label, and > >> add a simple test of the default NFS file labeling. > >> > >> With the previous changes, this completes addressing > >> https://github.com/SELinuxProject/selinux-testsuite/issues/32 > >> > >> Fixes: https://github.com/SELinuxProject/selinux-testsuite/issues/32 > >> Signed-off-by: Stephen Smalley <sds@xxxxxxxxxxxxx> > >> --- > >> v3 moves nfs.sh under tools/, updates README.md, and fixes nfs.sh for > >> the relocation. As before, these patches depend on the previous one > >> ("testsuite: enable running over labeled NFS") in order to allow the > >> testsuite to pass on NFS mounts. > >> > >> README.md | 5 ++++- > >> tools/nfs.sh | 38 ++++++++++++++++++++++++++++++++++++++ > >> 2 files changed, 42 insertions(+), 1 deletion(-) > > > > Both are now applied. > > > > [...] > > It would be good if we could get tools/nfs.sh running on kernels going > forward in addition to regular runs of selinux-testsuite. I've never tried this ... is it possible to mount a NFS mount over loopback? What about labeled NFS? -- paul moore www.paul-moore.com
