[Labeled-nfs] Personal Internet-Draft for MAC support in NFSv4

[Spencer Shepler]

On May 2, 2008, at 1:21 PM, Casey Schaufler wrote:

>
> --- Spencer Shepler <Spencer.Shepler at Sun.COM> wrote:
>
>
>>> I have no problem with you targeting the proposal to SELinux.
>>> That is your job, after all. Ignore all the other MAC schemes
>>> if you must, although to be honest that is going to raise its
>>> own set of political issues at the IETF. But please don't
>>> turn this into a battlefield within our extraordinarily small
>>> MAC community, and especially don't do it in front of the
>>> children^H^H^H^H^H^H^H^HIETF.
>>
>> I would suggest that comments about the I-D be targeted
>> at the NFSv4 working group.  It is an opportunity to educate
>> the set of NFS engineers there such that they can assist
>> in moving this work forward in whatever form it takes.
>
> Hum. This was only posted to labeled-nfs list. I don't know
> how many of the NFSv4 working group are on the list, but for
> those who are, let me try to translate my comments:
>
> 1. Don't go diss'n things that ain't SELinux.
> 2. I would prefer that the mechanism support schemes
>    other than SELinux, but I understand that the author
>    has priorities that may not match mine.

Those are fantastic comments for the NFSv4 working group.
It represents the type of discussion that should
occur with the goal of having a requirements discussion
and document that represent reasonably broad needs.

btw: anyone can subscribe to the NFSv4 working group alias.
The traffic can be a little pedantic at times given
the topic but the volume usually isn't that large.

Spencer

> 3. I don't see any significant problems with the memo
>    so far, barring 1 and 2 above.
>
>
> Casey Schaufler
> casey at schaufler-ca.com
> _______________________________________________
> Labeled-nfs mailing list
> Labeled-nfs at linux-nfs.org
> http://linux-nfs.org/cgi-bin/mailman/listinfo/labeled-nfs