I'm not that familiar with gluster, but yes, it sounds like we ought to
eventually be able to hook that up to the security label attribute in
ganesha.
Cheers,
Jeff
On Thu, 2018-09-06 at 14:54 -0400, Janak Gtri wrote:
Thanks Jeff for the quick response.
Just to clarify. By server mode you mean FSAL for file system
such as xfs that support xattrs, right?
As far as "fsal that has some other way to store the labels", are you
referring to something like glusterfs's new selinux xlator?
https://docs.gluster.org/en/v3/release-notes/3.11.0/
That is, these two are not done yet but can be implemented fairly simply?
glusterfs release notes states that there are two potential clients that
can take advantage of this selinux xlator. One, using gluster native FUSE
client and the other using nfs-ganesha. The native FUSE client would
require fairly complex work in the kernel, which is currently not on anybody's
radar. That's why I was curious if nfs-ganesha can take advantage of this
gluster xlator feature with relative ease.
Thanks again for your help.
-Janak
On Thu, Sep 6, 2018 at 12:31 PM Jeff Layton <jlayton(a)redhat.com> wrote:
> On Thu, 2018-09-06 at 12:00 -0400, Janak Gtri wrote:
> > The latest version of nfs-ganesha supports nfs v4.2 protocols. Does that
include labeled nfs?
> >
> > Does FSAL for glusterfs have support to get/set labels (extended attributes
such as SELinux context)?
>
>
> Not yet.
>
> Limited server mode should be fairly simple to implement over any FSAL
> that supports xattrs or has some other way to store the labels. Full
> mode may eventually be possible but would require some way to request
> the FSAL to check labels for us.
> _______________________________________________
> Devel mailing list -- devel(a)lists.nfs-ganesha.org
> To unsubscribe send an email to devel-leave(a)lists.nfs-ganesha.org
--
Jeff Layton <jlayton(a)redhat.com>