[Labeled-nfs] Personal Internet-Draft for MAC support in NFSv4

[Casey Schaufler]

--- Spencer Shepler <Spencer.Shepler at Sun.COM> wrote:


> > I have no problem with you targeting the proposal to SELinux.
> > That is your job, after all. Ignore all the other MAC schemes
> > if you must, although to be honest that is going to raise its
> > own set of political issues at the IETF. But please don't
> > turn this into a battlefield within our extraordinarily small
> > MAC community, and especially don't do it in front of the
> > children^H^H^H^H^H^H^H^HIETF.
> 
> I would suggest that comments about the I-D be targeted
> at the NFSv4 working group.  It is an opportunity to educate
> the set of NFS engineers there such that they can assist
> in moving this work forward in whatever form it takes.

Hum. This was only posted to labeled-nfs list. I don't know
how many of the NFSv4 working group are on the list, but for
those who are, let me try to translate my comments:

1. Don't go diss'n things that ain't SELinux.
2. I would prefer that the mechanism support schemes
   other than SELinux, but I understand that the author
   has priorities that may not match mine.
3. I don't see any significant problems with the memo
   so far, barring 1 and 2 above.


Casey Schaufler
casey at schaufler-ca.com