Developer Summit 2009/Abstracts/Quigley Labeled NFS

From SELinux Wiki

Revision as of 09:00, 2 July 2009 (edit) JamesMorris (Talk | contribs) (New page: == Author == Dave Quigley == Topic == State of Labeled NFS Effort == Abstract == As the use of SELinux expands in Enterprise environments customers are requesting the ability to use S...) ← Previous diff		Current revision (09:06, 2 July 2009) (edit) (undo) JamesMorris (Talk | contribs)
Line 5:		Line 5:
	== Topic ==		== Topic ==
-	State of Labeled NFS Effort	+	Labeled NFS Community Involvement
	== Abstract ==		== Abstract ==
-	As the use of SELinux expands in Enterprise environments customers are	+	Discuss the current status of the Labeled NFS work and ways to increase
-	requesting the ability to use SELinux with their NFS based network storage.	+	community involvement. For the last year the prototype of Labeled NFS
-	The labeled-nfs project seeks to extend the NFSv4 protocol to provide a	+	has been stable and usable in certain environments. To expand the
-	generic mechanism for conveying process and file MAC security attribute	+	capabilities of Labeled NFS additional development and design work is
-	information for use by security mechanisms employed on the client and	+	needed in the areas of RPC security, interoperability, and standards. I
-	server.	+	would like to present several areas where members of the SELinux and
-		+	greater security communities can increase their involvement and help
-	This talk explores the design and implementation for the labeled-nfs	+	progress Labeled NFS standardization and merger into the mainline Linux
-	effort. We discuss why certain design decisions were made and what impact	+	kernel.
-	they have on the implementation of NFS in the Linux kernel and NFS userland	+
-	infrastructure. Finally we discuss how parts of the labeled-nfs	+
-	infrastructure can be used in other remote file systems.	+

---

Current revision

[edit] Author

Dave Quigley

[edit] Topic

Labeled NFS Community Involvement

[edit] Abstract

Discuss the current status of the Labeled NFS work and ways to increase community involvement. For the last year the prototype of Labeled NFS has been stable and usable in certain environments. To expand the capabilities of Labeled NFS additional development and design work is needed in the areas of RPC security, interoperability, and standards. I would like to present several areas where members of the SELinux and greater security communities can increase their involvement and help progress Labeled NFS standardization and merger into the mainline Linux kernel.