Return-Path: linux-nfs-owner@vger.kernel.org Received: from countercultured.net ([209.51.175.25]:34831 "HELO countercultured.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with SMTP id S1756619Ab2K2BOl (ORCPT ); Wed, 28 Nov 2012 20:14:41 -0500 Message-ID: <50B6B706.1010002@davequigley.com> Date: Wed, 28 Nov 2012 20:14:46 -0500 From: Dave Quigley MIME-Version: 1.0 To: Casey Schaufler CC: bfields@fieldses.org, trond.myklebust@netapp.com, sds@tycho.nsa.gov, linux-nfs@vger.kernel.org, selinux@tycho.nsa.gov, linux-security-module@vger.kernel.org Subject: Re: Labeled NFS [v5] References: <1352700947-3915-1-git-send-email-dpquigl@davequigley.com> <50ABF1A5.2010406@schaufler-ca.com> <50AC1A74.7080105@davequigley.com> <50AC2117.801@schaufler-ca.com> <50AC224D.3080108@davequigley.com> <50AC41DC.5070607@schaufler-ca.com> <50AC4A7A.6010208@davequigley.com> <50B65E7E.4030607@schaufler-ca.com> In-Reply-To: <50B65E7E.4030607@schaufler-ca.com> Content-Type: text/plain; charset=windows-1252; format=flowed Sender: linux-nfs-owner@vger.kernel.org List-ID: On 11/28/2012 1:57 PM, Casey Schaufler wrote: > On 11/20/2012 7:28 PM, Dave Quigley wrote: >> On 11/20/2012 9:52 PM, Casey Schaufler wrote: >>> On 11/20/2012 4:37 PM, Dave Quigley wrote: >>>> ... >>>> >>>> >>>> Or I could just give you this link and you should be good to go ;) >>>> >>>> http://www.selinuxproject.org/~dpquigl/nfs-utils-rpms/ >>>> >>>> I haven't tried it but it should work. If it doesn't let me know and >>>> i'll try to fix it on my end. I'd imagine you might need to yum remove >>>> nfs-utils first before adding this new one or you could also try an >>>> rpm with the upgrade flag for this instead. Good luck. >>> > ... > > > I've tried on Fedora17 and Ubuntu12.04, and I'm getting the > attached stack trace on mount. After mounting I'm getting > denials when I should, but also when I shouldn't. > > I've tried tracking down the issue, but there's a lot going on > that I don't find obvious. I added a dentry_init hook just for > grins, but it's not getting called. > > . > > Any chance of you throwing a kickstart file my way that's configured with SMACK so I can use it for a test box (both server and client)? I can have the guys working with me test for SMACK as well if you provide an appropriate test harness and image for testing. Dave