On Thu, Feb 28, 2008 at 02:30:35PM -0500, Stephen Smalley wrote:
I think Casey is totally right here. The LSM interface should not be
as specific here. If you want to limit the NFSv4 interface to single
MAC xattr label based systems add an additional method to check if
the LSM is that. But the proper fix is of course to not add somthing
so specific to NFSv4 at all, as it's got enough shortcoming already.
Please add a proper xattr protocol. It's not like it's hard, SGI
has been doing this in IRIX for NFSv3 for ages as a sideband protocol,
and even release the reference source under the GPL. Just either use
that with NFSv4 or if you feel fancy merge it into the NFS spec for
NFSv6^H4.2.
Wow, that's rude even to someone as direct as me. Casey is the only
other person having an in-tree LSM, and I think his input in this
area is important. But if not I as a VFS person can happily give
you my "no" for the current version from the VFS point of view.
--
