[Labeled-nfs] Current development prototype patches.

[James Morris]

On Tue, 7 Aug 2007, Matthew N. Dodd wrote:

> Sure.  The NFS client has no EA code currently.  So I'd need to add stubs just
> to get to the point where I can fake out part of the EA namespace to translate
> calls to setattr/getattr over the wire.  This is somewhat annoying after all
> the talk about EAs being these pure abstract blobs that the kernel doesn't
> interpret.

There's a difference between EAs as a local API, and EAs being transmitted 
over the wire.

EAs as an API for setting and getting SELinux labels is already 
established as an fs-indepdendent mechanism, and NFS needs to look the 
same to applications as all other filesystesm in this respect.


- James
-- 
James Morris
<jmorris at namei.org>