xfs
[Top] [All Lists]

Security namespace (was Re: Checking FS type)

To: Diyab <diyab@xxxxxxxxxxxx>
Subject: Security namespace (was Re: Checking FS type)
From: Nathan Scott <nathans@xxxxxxx>
Date: Mon, 12 Jan 2004 11:17:38 +1100
Cc: linux-xfs@xxxxxxxxxxx
In-reply-to: <40007A49.4060907@xxxxxxxxxxxx>
References: <40007A49.4060907@xxxxxxxxxxxx>
Sender: linux-xfs-bounce@xxxxxxxxxxx
User-agent: Mutt/1.5.3i
On Sat, Jan 10, 2004 at 05:18:49PM -0500, Diyab wrote:
> Hello,
> 
> I'm working with SELinux and adding XFS attribute / security label 
> support into the API.  The problem I'm running into is trying to 
> determine what type of filesystem the file I'm operating on is located 
> on.  With ext2/3 the EA attribute name is different from what it will be 
> on an XFS file system so I need to detect the file system type from the 
> file stream I have open. I'm not familiar with how to check the file 
> system type since I've not done this before so does anyone have any 
> suggestions to give me? Any help is really appreciated, thanks!
> 
> Timothy,
> 
> Also please CC me because I am not on the list.

Hi there Timothy,

You'll want to read the thread "[patch] security. namespace"
recently - see the linux-xfs list archives on oss.sgi.com.

The right way to implement this is to support the "security"
namespace in XFS.  The attached (experimental) patch does
just that - there are missing pieces (xfsdump/xfsrestore do
not support this yet, etc), but this seems fairly stable so
far.  The patch is from late last year, it will need a few
tweaks to work with the current CVS trees, but should apply
relatively cleanly to older trees and Marcelo's bk tree (but
not yet Andrew's/Linus' bk tree - thats a few changes behind
us just at the moment and will conflict on this one).

It needs some more testing, and technical discussion between
us SGI folks before this patch will be applied.  (so please
don't follow up with "when will this be applied" questions ;)

Have fun.

cheers.

-- 
Nathan

Attachment: secure_attr.patch
Description: Text document

<Prev in Thread] Current Thread [Next in Thread>