On Wed, Jan 24, 2024 at 3:13 PM Stephen Smalley <stephen.smalley.work@xxxxxxxxx> wrote: > On Wed, Jan 24, 2024 at 1:42 PM Stephen Smalley > <stephen.smalley.work@xxxxxxxxx> wrote: > > > > So the recent discussion regarding questionable setting of > > isec->sclass in inode_setxattr and inode_setsecurity that was > > introduced by the labeled NFS support patch made me wonder about the > > state of the selinux-testsuite nfs tests. Trying to run those on a > > current kernel fails even before getting to the tests themselves > > because the attempt to relabel the files to test_file_t fails with > > Operation not supported errors. Anyone know when this last worked? > > Looks like this has been reported for Fedora kernels here, > https://bugzilla.redhat.com/show_bug.cgi?id=2257983 > as a regression from 6.6.2 to 6.6.3 and later. Thanks for looking into this Stephen. Unfortunately I can't seem to access that BZ right now (the FAS login page is hanging for me), has a root cause been identified? -- paul-moore.com