Return-Path: linux-nfs-owner@vger.kernel.org Received: from slb-mbsout-01.boeing.com ([130.76.64.128]:51768 "EHLO slb-mbsout-01.boeing.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1760783Ab3DBNJE convert rfc822-to-8bit (ORCPT ); Tue, 2 Apr 2013 09:09:04 -0400 From: "Vu, Joseph" To: David Quigley CC: Casey Schaufler , "J. Bruce Fields" , Steve Dickson , Trond Myklebust , "J. Bruce Fields" , "David P. Quigley" , Linux NFS list , Linux Security List , SELinux List Subject: RE: [PATCH 13/14] NFSD: Server implementation of MAC Labeling Date: Tue, 2 Apr 2013 13:01:12 +0000 Message-ID: <756D04455A661C4CA25DC5BA4902A7A722698BD4@XCH-PHX-204.sw.nos.boeing.com> References: <1364478845-29796-1-git-send-email-SteveD@redhat.com> <1364478845-29796-14-git-send-email-SteveD@redhat.com> <20130328161444.GF7080@fieldses.org> <51550C03.1000107@davequigley.com> <20130329144050.GB22307@fieldses.org> <001ff69afd411b0318d7122bf07bd218@countercultured.net> <5155B0E3.9040108@schaufler-ca.com> <20130329184219.GG22307@fieldses.org> <5155F51E.8020603@schaufler-ca.com> <756D04455A661C4CA25DC5BA4902A7A722698B22@XCH-PHX-204.sw.nos.boeing.com> In-Reply-To: Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Sender: linux-nfs-owner@vger.kernel.org List-ID: Thank you David. It is good that the community at least support some short term solution. Labeled NFS has been working hard to get the community acceptance. Thanks. -----Original Message----- From: David Quigley [mailto:dpquigl@davequigley.com] Sent: Monday, April 01, 2013 10:55 AM To: Vu, Joseph Cc: Casey Schaufler; J. Bruce Fields; Steve Dickson; Trond Myklebust; J. Bruce Fields; David P. Quigley; Linux NFS list; Linux Security List; SELinux List Subject: RE: [PATCH 13/14] NFSD: Server implementation of MAC Labeling On 04/01/2013 08:54, Vu, Joseph wrote: > What is a good, and working alternative for NFS in term of SE label? There isn't any unless you want to start a labeled cifs project. We looked at CIFS and NFSv4 back when I started this project and from what we saw NFS had the more open community. There are other solutions but they are not ideal. I believe someone did SELinux labels on network attached storage by treating the NAS as an iSCSI device. This isn't ideal because it has concurrency issues. Someone proposed xattr for NFSv4/NFSv3 support and that was shot down as well (and for good reason). I don't share Casey's skepticism about the long term importance of NFS. I think with NFSv4 and all the work that has gone into it we'll see NFS being important in Linux and enterprises for a very long time to come.