Received: by 2002:a05:7412:8d10:b0:f3:1519:9f41 with SMTP id bj16csp6220160rdb; Thu, 14 Dec 2023 11:29:18 -0800 (PST) X-Google-Smtp-Source: AGHT+IGhJy9qtL6HzPzIXc+XyAqaJeqLv6BfBbaOwSeEbIRkbpLqg/44HQWeC1mRzvNbLx50JBOF X-Received: by 2002:a17:907:38c:b0:a19:a19b:78d8 with SMTP id ss12-20020a170907038c00b00a19a19b78d8mr4610875ejb.155.1702582158075; Thu, 14 Dec 2023 11:29:18 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1702582158; cv=none; d=google.com; s=arc-20160816; b=WpfU7BFOU62WXfQoB+3HylqqcgZsmNpaHoG7RkS8kUrGEc6AY8AgO0IG8Y/Yt8jj2/ U1Y9ffqxUsE93lzjnj5FdwRlcuNF/nnhQtzfLnUly+lTJ4HkQ1icYCs51TahQOh70gdw 9fPoUMd6Cgmgc9ZASm+QsIz2HyDbpDrtsmiL3sGJ70SLZ8q9w+pIHsKli+CCc6/6yMsZ 05Fa7ALcsO3MbbLNxSjAITnpE11ZV2dnaqA84yVd46M/oXws1tGjnuVla1FZrH6I0GCM OjDC7x+1ejsMpTsADWevK5bvp0GbTjPf42PAf7qIopIfbCkHCfuQ3QCI8AyGlAswmT9+ v9tA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=to:subject:message-id:date:from:mime-version:list-unsubscribe :list-subscribe:list-id:precedence:dkim-signature; bh=mQMVfirIwB5s1e6tfL6qzf0pPConlkHBcQMnQGMTGOc=; fh=Mys3y4MwsHRytUQMpdfGBn3oGRYLcLloxNwkFYMYMmg=; b=gBBYX/gHijJO1CB2PR94THQC53v9J+Vu8Z59tTziWwocEt6mI3BBKTrgYJjQ3DiTnm JXUOXhwpKU7nlrdvVEUxJelVpf2dOGS7JBEVAHKhVtX7qfw2LHTJ/731audDHwet/xPr O/GZ1KCzy9/URAs+3DIPHESjS89KW185/42uvUa6fFj5zi5teDJfzwYBbPGdAStVU0UW 3/e7nDuS4uRDIWEqYU1f8AQ89AkA5lkeTDlEu57E5f35ePEpw3GOOM8DtNiblJl+bFO9 zc5ZPZMvJQiv9nUysQDITwy/P/fFJ5jnCK+4YKPizwlw4z9wrfWXzik3THHpdgtQBWG8 CI7A== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=AbISaxUb; spf=pass (google.com: domain of linux-nfs+bounces-609-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.80.249 as permitted sender) smtp.mailfrom="linux-nfs+bounces-609-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from am.mirrors.kernel.org (am.mirrors.kernel.org. [147.75.80.249]) by mx.google.com with ESMTPS id qk12-20020a170906d9cc00b00a1cdf89bc57si6266247ejb.186.2023.12.14.11.29.18 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 14 Dec 2023 11:29:18 -0800 (PST) Received-SPF: pass (google.com: domain of linux-nfs+bounces-609-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.80.249 as permitted sender) client-ip=147.75.80.249; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20230601 header.b=AbISaxUb; spf=pass (google.com: domain of linux-nfs+bounces-609-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.80.249 as permitted sender) smtp.mailfrom="linux-nfs+bounces-609-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by am.mirrors.kernel.org (Postfix) with ESMTPS id C87471F21701 for ; Thu, 14 Dec 2023 19:29:17 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 709F76978D; Thu, 14 Dec 2023 19:29:15 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="AbISaxUb" X-Original-To: linux-nfs@vger.kernel.org Received: from mail-lj1-f176.google.com (mail-lj1-f176.google.com [209.85.208.176]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 7F2B869790 for ; Thu, 14 Dec 2023 19:29:13 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-lj1-f176.google.com with SMTP id 38308e7fff4ca-2ca02def690so108928731fa.3 for ; Thu, 14 Dec 2023 11:29:13 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1702582150; x=1703186950; darn=vger.kernel.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=mQMVfirIwB5s1e6tfL6qzf0pPConlkHBcQMnQGMTGOc=; b=AbISaxUb4CXJIJt4ImCWWqlspvNtCFG64SCTqVL5A8ph6dzWFDdeWKJZamo7c7/C9U O/3DfStN1lcvIb6MCmtxlDMrA7wHRZnk52l937F49g+RQsixZmRwkSbLUuwHX6sQ6i9u 8m29ndRCezp7KQgJAR8c8ySuQdKxVPgaam1RW+6L8X5BSjwonbvByPxCeJE4lNl86xn2 pbIDz5OhcL6tvDx8WzkibUeacBg0onkCALDACC2kzgTBc2fceKejO00EqRQGnM2+BL3c Az1HOwn5Oh3KiAYNsBRZtFv5Mv7P7o2ONsKMYbcPbhDuju316maUFYhSK3LBsPRcXgcQ byEQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1702582150; x=1703186950; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=mQMVfirIwB5s1e6tfL6qzf0pPConlkHBcQMnQGMTGOc=; b=Ufk+NbJnH8ZNHMMlRtR1Lihx8+mF0m9aDe5sEhyk/5okMhVgDRFj0kyowYa17hsGpA e//PpDL/iC6KhSt/Q2wpIx3E1OnzZcyp7TIs7wpD9yTnfi/hfZk33t+vsvI6O1u8ADBz 3RwwC1VkicQ4dMcWa0Q5lBIIy5nlieQw/Dli69IoIQCjkAzI8d4ovy+YkplFdRGmqmPf 7w9OTwRGuZosrMniIryDbp1PgDUy/wrfM0peKIR7SuhvEyqwjIDy9yYA8m9+ecYtUbb+ +HxDg+RcYUAUPWknxOrpgrXZYEP4jJaJ+atJ9lvAulfCImiaT2aZzLIah93FU//cC1YH W1ZQ== X-Gm-Message-State: AOJu0YyOghv5CegmJjFI6YArcT5pXvvizdZ2Ap7QJxDWOa1KU3lTnCxt dR9FTJ9iy+FRUKSCn13FQPSKY7shtB0bhkDYt3ue2nv6miA= X-Received: by 2002:a05:651c:1a06:b0:2cb:2cae:2cc1 with SMTP id by6-20020a05651c1a0600b002cb2cae2cc1mr5697701ljb.3.1702582150070; Thu, 14 Dec 2023 11:29:10 -0800 (PST) Precedence: bulk X-Mailing-List: linux-nfs@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 From: Jeff Hunter Date: Thu, 14 Dec 2023 14:28:58 -0500 Message-ID: Subject: IMA over NFS To: linux-nfs@vger.kernel.org Content-Type: text/plain; charset="UTF-8" My apologies if this isn't the correct forum for this . . . Our customer desires to have Integrity Measurement Architecture (IMA) values follow across NFS mounts. The linux kernel now supports xattr, but only for user.* attributes. We've modified this to support security.ima, but in doing so we've noticed that the xattr support in NFS is very specific to user.* attributes. Was this done for a reason? Is there a reason security.ima wasn't included? Please advise . . . Regards, Jeff Hunter