[Labeled-nfs] Current development prototype patches.

Matthew N. Dodd Matthew.Dodd at sparta.com
Fri Aug 3 16:33:12 EDT 2007


Between traveling and recovering from the flu I've been out a good bit 
of this week and the last part of last.  I'll try and respond to points 
in previous messages this weekend.

Attached are the current patches I'm running relative to 2.6.21.3.

I'm passing around a 32 bit sid variable in iattr/nfs_fattr structures 
to simplify things during development.  I expect to be using a opaque 
"blob" as things progress but currently I'm more interested in figuring 
out where code needs to be added and getting to the point where I can 
verify that change notification will function correctly.

There have been many good comments directed at the patches and I'll 
incorporate them once I'm out of "quick and dirty" mode.

Anyhow, the current status is that labels are passed on the wire both to 
and from the server.  I've not hooked things up on the server so that 
the label is saved to the local filesystem because there is still some 
ambiguity as to the code paths (at least in my mind.)  I've also not 
made any attempt so far to support a "dumb" server, though its really a 
matter of code.

Only explicit SETATTR or file creation will result in a label being 
pushed to the server.  mknod/mkdir/mkfifo etc. are next on my list.

I would like to ask opinions on a less EA centric mechanism for setting 
labels from userland.  As we're pursuing a labeling solution that does 
not rely on EAs for persistent storage (from the client's point of view) 
it becomes difficult to shoehorn things so that userland tools work as 
expected.

-- 
Matthew N. Dodd <Matthew.Dodd at sparta.com>
Principal Engineer, ISSO, SRD
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: labeled-nfs.patch
Url: http://linux-nfs.org/pipermail/labeled-nfs/attachments/20070803/30e23459/attachment.ksh 


More information about the Labeled-nfs mailing list