I'm not that familiar with gluster, but yes, it sounds like we ought to
eventually be able to hook that up to the security label attribute in
ganesha.

Cheers,
Jeff

On Thu, 2018-09-06 at 14:54 -0400, Janak Gtri wrote:
> Thanks Jeff for the quick response.
>
> Just to clarify. By server mode you mean FSAL for file system
> such as xfs that support xattrs, right?
>
> As far as "fsal that has some other way to store the labels", are you
> referring to something like glusterfs's new selinux xlator?
>
> https://docs.gluster.org/en/v3/release-notes/3.11.0/
>
> That is, these two are not done yet but can be implemented fairly simply?
>
> glusterfs release notes states that there are two potential clients that
> can take advantage of this selinux xlator. One, using gluster native FUSE
> client and the other using nfs-ganesha. The native FUSE client would
> require fairly complex work in the kernel, which is currently not on anybody's
> radar. That's why I was curious if nfs-ganesha can take advantage of this
> gluster xlator feature with relative ease.
>
> Thanks again for your help.
>
> -Janak
>
>
>
>
> On Thu, Sep 6, 2018 at 12:31 PM Jeff Layton <jlayton@redhat.com> wrote:
> > On Thu, 2018-09-06 at 12:00 -0400, Janak Gtri wrote:
> > > The latest version of nfs-ganesha supports nfs v4.2 protocols. Does that include labeled nfs?
> > >
> > > Does FSAL for glusterfs have support to get/set labels (extended attributes such as SELinux context)?
> >
> >
> > Not yet.
> >
> > Limited server mode should be fairly simple to implement over any FSAL
> > that supports xattrs or has some other way to store the labels. Full
> > mode may eventually be possible but would require some way to request
> > the FSAL to check labels for us.
> > _______________________________________________
> > Devel mailing list -- devel@lists.nfs-ganesha.org
> > To unsubscribe send an email to devel-leave@lists.nfs-ganesha.org

--
Jeff Layton <jlayton@redhat.com>