[RFC] Security Enhanced NFS (SENFS) Requirements - draft 05

[Mike Eisler]

> -----Original Message-----
> From: Christoph Hellwig [mailto:hch at infradead.org] 
> Sent: Saturday, June 23, 2007 2:11 PM
> To: James Morris
> Cc: nfsv4 at linux-nfs.org; Karl MacMillan; Matthew N. Dodd; 
> Chris Vance; Eric Paris; selinux at tycho.nsa.gov; Casey 
> Schaufler; Stephen Smalley
> Subject: Re: [RFC] Security Enhanced NFS (SENFS) Requirements 
> - draft 05
> 
> On Sat, Jun 23, 2007 at 01:45:45PM -0400, James Morris wrote:
> > On Sat, 23 Jun 2007, Christoph Hellwig wrote:
> > 
> > > I'd love to see having support for this protocol on 
> Linux.  There's
> > > a lot of demand both for security label and just general 
> user extended
> > > attributes on NFS.
> > 
> > NFSv4 has named attributes, which are modeled on Solaris 
> subfile-style 
> > extended attributes.

Actually Windows and UDFS were the models.

> Which is exactly the problem.  As usual NFSv4 has choosen the 
> most braindead of
> all available models.  That's why this protocol sucks so badly.

The protocol's development was and remains open process. 
Don't whine if you didn't speak up
when the protocol was being drafted.  

If you intend to add labels to NFSv4.x, you'll have a better
chance of persuading stakeholders if don't open with 
NFSv4 "sucks so badly".