Difference between revisions of "Developer Summit 2009/Abstracts/Quigley Labeled NFS"

From SELinux Wiki
Jump to: navigation, search
(New page: == Author == Dave Quigley == Topic == State of Labeled NFS Effort == Abstract == As the use of SELinux expands in Enterprise environments customers are requesting the ability to use S...)
 
 
Line 5: Line 5:
 
== Topic ==
 
== Topic ==
  
State of Labeled NFS Effort
+
Labeled NFS Community Involvement
  
 
== Abstract ==
 
== Abstract ==
  
As the use of SELinux expands in Enterprise environments customers are
+
Discuss the current status of the Labeled NFS work and ways to increase
requesting the ability to use SELinux with their NFS based network storage.
+
community involvement. For the last year the prototype of Labeled NFS
The labeled-nfs project seeks to extend the NFSv4 protocol to provide a
+
has been stable and usable in certain environments. To expand the
generic mechanism for conveying process and file MAC security attribute
+
capabilities of Labeled NFS additional development and design work is
information for use by security mechanisms employed on the client and
+
needed in the areas of RPC security, interoperability, and standards. I
server.
+
would like to present several areas where members of the SELinux and
 
+
greater security communities can increase their involvement and help
This talk explores the design and implementation for the labeled-nfs
+
progress Labeled NFS standardization and merger into the mainline Linux
effort. We discuss why certain design decisions were made and what impact
+
kernel.
they have on the implementation of NFS in the Linux kernel and NFS userland
+
infrastructure.  Finally we discuss how parts of the labeled-nfs
+
infrastructure can be used in other remote file systems.
+

Latest revision as of 09:06, 2 July 2009

Author

Dave Quigley

Topic

Labeled NFS Community Involvement

Abstract

Discuss the current status of the Labeled NFS work and ways to increase community involvement. For the last year the prototype of Labeled NFS has been stable and usable in certain environments. To expand the capabilities of Labeled NFS additional development and design work is needed in the areas of RPC security, interoperability, and standards. I would like to present several areas where members of the SELinux and greater security communities can increase their involvement and help progress Labeled NFS standardization and merger into the mainline Linux kernel.