Return-Path: linux-nfs-owner@vger.kernel.org Received: from mx1.redhat.com ([209.132.183.28]:46127 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1758375Ab3BLWN1 (ORCPT ); Tue, 12 Feb 2013 17:13:27 -0500 Date: Tue, 12 Feb 2013 17:13:18 -0500 From: "J. Bruce Fields" To: Casey Schaufler Cc: "J. Bruce Fields" , Steve Dickson , Trond Myklebust , "David P. Quigley" , Linux NFS list , Linux FS devel list , Linux Security List , SELinux List Subject: Re: [PATCH 00/15] lnfs: 3.8-rc6 release Message-ID: <20130212221317.GC12593@pad.fieldses.org> References: <1360327163-20360-1-git-send-email-SteveD@redhat.com> <20130212214131.GI10267@fieldses.org> <511ABC09.3040605@schaufler-ca.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii In-Reply-To: <511ABC09.3040605@schaufler-ca.com> Sender: linux-nfs-owner@vger.kernel.org List-ID: On Tue, Feb 12, 2013 at 02:02:49PM -0800, Casey Schaufler wrote: > On 2/12/2013 1:41 PM, J. Bruce Fields wrote: > > On Fri, Feb 08, 2013 at 07:39:08AM -0500, Steve Dickson wrote: > >> include/linux/security.h | 57 +++- > > ... > >> security/capability.c | 19 +- > >> security/security.c | 24 +- > >> security/selinux/hooks.c | 92 +++++- > >> security/selinux/include/security.h | 2 + > >> security/selinux/ss/policydb.c | 5 +- > >> security/smack/smack_lsm.c | 11 + > >> 33 files changed, 1352 insertions(+), 214 deletions(-) > > Are we still waiting on ACKs from the security people for these bits? > > I'm not going to NAK it, because I don't know it won't work, > but I'm not going to ACK it either, because I have not been > able to get it to work. I have no idea what the problem > might be, and the "obvious" things we've tried have proven > ineffective. I may have a bad set of user space tools. There > may be more work on Smack hooks required. I can't tell, and > there's way too much NFS set-up involved to make progress in > the limited time I have available. > > If you're waiting for my ACK, no, you don't have it. > If you're OK with a lack of NAK, go ahead. There will > be changes someday I suspect, but I can't put this high > enough on my priorities to devote the time required > just now. OK, completely understood. We need someone to ack the security and selinux pieces, though. (That would be James, Stephen, or Eric?) --b.