On Fri, Feb 14, 2020 at 8:16 AM Stephen Smalley <sds@xxxxxxxxxxxxx> wrote: > > On 2/13/20 5:12 PM, Paul Moore wrote: > > On Thu, Feb 6, 2020 at 11:36 AM Stephen Smalley <sds@xxxxxxxxxxxxx> wrote: > >> It would be good if we could get tools/nfs.sh running on kernels going > >> forward in addition to regular runs of selinux-testsuite. > > > > I've never tried this ... is it possible to mount a NFS mount over > > loopback? What about labeled NFS? > > Yes to both. That's how tools/nfs.sh works. I added instructions to > the README.md as part of the patch for dependencies and running it, but > it isn't run by default. [Apologies to Stephen who is getting two copies of this, I forgot to hit reply-all on my original response] Thanks. I'll look into adding that to my automated testing. I also need to set something up to check to see what other subsystems drop in security/selinux both in the linux-next tree as well as in Linus' tree during the -rcX phase. The keys patch is the latest snafu, but there have been others. -- paul moore www.paul-moore.com