Home » Mailing list archives » linux-fsdevel » 2008 » February » 29

Re: [PATCH 01/11] Security: Add hook to get full maclabel xattr name

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
[view in full thread]
From: Casey Schaufler
Subject: Re: [PATCH 01/11] Security: Add hook to get full maclabel xattr name
Date: Friday, February 29, 2008 - 3:58 pm

--- Dave Quigley <dpquigl@tycho.nsa.gov> wrote:


Trond can, and I'm completely confident he will, correct me if I'm
wrong, but interoperability seems to require that you can't assume
the perfect administration scenario. If you could, the name/value
pair scheme would be perfectly viable, but Trond has very clearly
explained why it is not reasonable to assume that.

But, for early going you may get away with telling people that
the configuration has to be identical. They won't listen and will
mess it up, but you will probably get away with it.



Casey Schaufler
casey@schaufler-ca.com
--
To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
Messages in current thread:
RFC Labeled NFS Initial Code Review, David P. Quigley, (Wed Feb 27, 3:11 pm)
[PATCH 01/11] Security: Add hook to get full maclabel xatt ..., David P. Quigley, (Wed Feb 27, 3:11 pm)
[PATCH 02/11] Security: Add hook to calculate context base ..., David P. Quigley, (Wed Feb 27, 3:11 pm)
[PATCH 03/11] VFS: Add security label support to *notify, David P. Quigley, (Wed Feb 27, 3:11 pm)
[PATCH 04/11] KConfig: Add KConfig entries for SELinux lab ..., David P. Quigley, (Wed Feb 27, 3:11 pm)
[PATCH 05/11] NFSv4: Add label recommended attribute and N ..., David P. Quigley, (Wed Feb 27, 3:11 pm)
[PATCH 06/11] SELinux: Add new labeling type native labels, David P. Quigley, (Wed Feb 27, 3:11 pm)
[PATCH 07/11] NFS/SELinux: Add security_label text mount o ..., David P. Quigley, (Wed Feb 27, 3:11 pm)
[PATCH 08/11] NFS: Introduce lifecycle management for labe ..., David P. Quigley, (Wed Feb 27, 3:11 pm)
[PATCH 09/11] NFS: Client implementation of Labeled-NFS, David P. Quigley, (Wed Feb 27, 3:11 pm)
[PATCH 10/11] NFS: Extend nfs xattr handlers to accept the ..., David P. Quigley, (Wed Feb 27, 3:11 pm)
[PATCH 11/11] NFSD: Server implementation of MAC Labeling, David P. Quigley, (Wed Feb 27, 3:11 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Wed Feb 27, 4:42 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Dave Quigley, (Wed Feb 27, 5:12 pm)
Re: RFC Labeled NFS Initial Code Review, Dave Quigley, (Wed Feb 27, 5:48 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Wed Feb 27, 6:07 pm)
Re: [PATCH 03/11] VFS: Add security label support to *notify, James Morris, (Wed Feb 27, 6:20 pm)
Re: RFC Labeled NFS Initial Code Review, Dave Quigley, (Wed Feb 27, 6:23 pm)
Re: [PATCH 05/11] NFSv4: Add label recommended attribute a ..., Dave Quigley, (Wed Feb 27, 6:45 pm)
Re: [PATCH 11/11] NFSD: Server implementation of MAC Labeling, James Morris, (Wed Feb 27, 6:46 pm)
Re: [PATCH 05/11] NFSv4: Add label recommended attribute a ..., James Morris, (Wed Feb 27, 6:52 pm)
Re: [PATCH 08/11] NFS: Introduce lifecycle management for ..., James Morris, (Wed Feb 27, 9:13 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Stephen Smalley, (Thu Feb 28, 6:43 am)
Re: [PATCH 05/11] NFSv4: Add label recommended attribute a ..., Stephen Smalley, (Thu Feb 28, 6:55 am)
Re: [PATCH 07/11] NFS/SELinux: Add security_label text mou ..., Eric Paris, (Thu Feb 28, 7:22 am)
Re: [PATCH 03/11] VFS: Add security label support to *notify, Dave Quigley, (Thu Feb 28, 9:07 am)
Re: [PATCH 08/11] NFS: Introduce lifecycle management for ..., Dave Quigley, (Thu Feb 28, 9:24 am)
Re: [PATCH 08/11] NFS: Introduce lifecycle management for ..., Dave Quigley, (Thu Feb 28, 9:46 am)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Thu Feb 28, 12:23 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Stephen Smalley, (Thu Feb 28, 12:30 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Thu Feb 28, 12:59 pm)
Re: [PATCH 03/11] VFS: Add security label support to *notify, Dave Quigley, (Thu Feb 28, 4:44 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Christoph Hellwig, (Thu Feb 28, 4:48 pm)
Re: [PATCH 03/11] VFS: Add security label support to *notify, Christoph Hellwig, (Thu Feb 28, 4:54 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Dave Quigley, (Thu Feb 28, 5:04 pm)
Re: [PATCH 03/11] VFS: Add security label support to *notify, Dave Quigley, (Thu Feb 28, 5:06 pm)
Re: [PATCH 03/11] VFS: Add security label support to *notify, Christoph Hellwig, (Thu Feb 28, 5:23 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Dave Quigley, (Thu Feb 28, 5:32 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Christoph Hellwig, (Thu Feb 28, 5:39 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Dave Quigley, (Thu Feb 28, 5:42 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Trond Myklebust, (Thu Feb 28, 5:50 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Christoph Hellwig, (Thu Feb 28, 5:51 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Dave Quigley, (Thu Feb 28, 5:52 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Trond Myklebust, (Thu Feb 28, 6:00 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Christoph Hellwig, (Thu Feb 28, 6:00 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Thu Feb 28, 6:04 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., James Morris, (Thu Feb 28, 6:15 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Thu Feb 28, 6:26 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Dave Quigley, (Thu Feb 28, 6:33 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Thu Feb 28, 6:47 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Dave Quigley, (Thu Feb 28, 6:48 pm)
Re: [PATCH 03/11] VFS: Add security label support to *notify, Dave Quigley, (Thu Feb 28, 6:52 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Thu Feb 28, 6:55 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Thu Feb 28, 7:07 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Dave Quigley, (Thu Feb 28, 7:09 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., James Morris, (Thu Feb 28, 7:15 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Thu Feb 28, 7:29 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Trond Myklebust, (Thu Feb 28, 10:01 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Trond Myklebust, (Thu Feb 28, 10:04 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Stephen Smalley, (Fri Feb 29, 6:30 am)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Stephen Smalley, (Fri Feb 29, 6:31 am)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Stephen Smalley, (Fri Feb 29, 7:45 am)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Fri Feb 29, 10:26 am)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Fri Feb 29, 10:46 am)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Fri Feb 29, 10:52 am)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Trond Myklebust, (Fri Feb 29, 11:28 am)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Fri Feb 29, 11:52 am)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Trond Myklebust, (Fri Feb 29, 12:50 pm)
Re: [PATCH 03/11] VFS: Add security label support to *notify, Dave Quigley, (Fri Feb 29, 1:19 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Dave Quigley, (Fri Feb 29, 2:00 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Fri Feb 29, 2:07 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Dave Quigley, (Fri Feb 29, 2:50 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Dave Quigley, (Fri Feb 29, 3:15 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Fri Feb 29, 3:27 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Fri Feb 29, 3:58 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Trond Myklebust, (Fri Feb 29, 5:09 pm)
Re: [PATCH 01/11] Security: Add hook to get full maclabel ..., Casey Schaufler, (Fri Feb 29, 5:41 pm)