http://selinuxproject.org/w/?title=Developer_Summit_2009/Abstracts/Quigley_Labeled_NFS&action=history&feed=atom 2013-05-20T18:23:04Z Revision history for this page on the wiki MediaWiki 1.10.4 http://selinuxproject.org/w/?title=Developer_Summit_2009/Abstracts/Quigley_Labeled_NFS&diff=579&oldid=prev 2009-07-02T09:06:53Z

<p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 09:06, 2 July 2009</td> </tr> <tr><td colspan="2" align="left"><strong>Line 5:</strong></td> <td colspan="2" align="left"><strong>Line 5:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">== Topic ==</td><td> </td><td style="background: #eee; font-size: smaller;">== Topic ==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">State of </del>Labeled NFS <del style="color: red; font-weight: bold; text-decoration: none;">Effort</del></td><td>+</td><td style="background: #cfc; font-size: smaller;">Labeled NFS <ins style="color: red; font-weight: bold; text-decoration: none;">Community Involvement</ins></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">== Abstract ==</td><td> </td><td style="background: #eee; font-size: smaller;">== Abstract ==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">As </del>the <del style="color: red; font-weight: bold; text-decoration: none;">use </del>of <del style="color: red; font-weight: bold; text-decoration: none;">SELinux expands in Enterprise environments customers are</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">Discuss </ins>the <ins style="color: red; font-weight: bold; text-decoration: none;">current status </ins>of <ins style="color: red; font-weight: bold; text-decoration: none;">the Labeled NFS work and ways to increase</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">requesting </del>the <del style="color: red; font-weight: bold; text-decoration: none;">ability to use SELinux with their </del>NFS <del style="color: red; font-weight: bold; text-decoration: none;">based network storage</del>.</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">community involvement. For </ins>the <ins style="color: red; font-weight: bold; text-decoration: none;">last year the prototype of Labeled </ins>NFS</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">The labeled-nfs project seeks to extend </del>the <del style="color: red; font-weight: bold; text-decoration: none;">NFSv4 protocol to provide a</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">has been stable and usable in certain environments</ins>. <ins style="color: red; font-weight: bold; text-decoration: none;">To expand </ins>the</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">generic mechanism for conveying process </del>and <del style="color: red; font-weight: bold; text-decoration: none;">file MAC security attribute</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">capabilities of Labeled NFS additional development </ins>and <ins style="color: red; font-weight: bold; text-decoration: none;">design work is</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">information for use by security mechanisms employed on </del>the <del style="color: red; font-weight: bold; text-decoration: none;">client </del>and</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">needed in </ins>the <ins style="color: red; font-weight: bold; text-decoration: none;">areas of RPC security, interoperability, </ins>and <ins style="color: red; font-weight: bold; text-decoration: none;">standards</ins>. <ins style="color: red; font-weight: bold; text-decoration: none;">I</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">server</del>.</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">would like to present several areas where members of </ins>the <ins style="color: red; font-weight: bold; text-decoration: none;">SELinux </ins>and</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">greater security communities can increase their involvement </ins>and <ins style="color: red; font-weight: bold; text-decoration: none;">help</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">This talk explores </del>the <del style="color: red; font-weight: bold; text-decoration: none;">design </del>and <del style="color: red; font-weight: bold; text-decoration: none;">implementation for the labeled-nfs</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">progress Labeled </ins>NFS <ins style="color: red; font-weight: bold; text-decoration: none;">standardization and merger into </ins>the <ins style="color: red; font-weight: bold; text-decoration: none;">mainline </ins>Linux</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">effort. We discuss why certain design decisions were made </del>and <del style="color: red; font-weight: bold; text-decoration: none;">what impact</del></td><td>+</td><td style="background: #cfc; font-size: smaller;">kernel.</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">they have on the implementation of </del>NFS <del style="color: red; font-weight: bold; text-decoration: none;">in </del>the Linux kernel <del style="color: red; font-weight: bold; text-decoration: none;">and NFS userland</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">infrastructure. Finally we discuss how parts of the labeled-nfs</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">infrastructure can be used in other remote file systems</del>.</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> </table>

JamesMorris http://selinuxproject.org/w/?title=Developer_Summit_2009/Abstracts/Quigley_Labeled_NFS&diff=576&oldid=prev 2009-07-02T09:00:59Z

<p>New page: == Author == Dave Quigley == Topic == State of Labeled NFS Effort == Abstract == As the use of SELinux expands in Enterprise environments customers are requesting the ability to use S...</p> <p><b>New page</b></p><div>== Author ==<br /> <br /> Dave Quigley<br /> <br /> == Topic ==<br /> <br /> State of Labeled NFS Effort<br /> <br /> == Abstract ==<br /> <br /> As the use of SELinux expands in Enterprise environments customers are<br /> requesting the ability to use SELinux with their NFS based network storage.<br /> The labeled-nfs project seeks to extend the NFSv4 protocol to provide a<br /> generic mechanism for conveying process and file MAC security attribute<br /> information for use by security mechanisms employed on the client and<br /> server.<br /> <br /> This talk explores the design and implementation for the labeled-nfs<br /> effort. We discuss why certain design decisions were made and what impact<br /> they have on the implementation of NFS in the Linux kernel and NFS userland<br /> infrastructure. Finally we discuss how parts of the labeled-nfs<br /> infrastructure can be used in other remote file systems.</div>

JamesMorris