Thanks Jeff for the quick response.

Just to clarify. By server mode you mean FSAL for file system
such as xfs that support xattrs, right?

As far as "fsal that has some other way to store the labels", are you
referring to something like glusterfs's new selinux xlator?

https://docs.gluster.org/en/v3/release-notes/3.11.0/

That is, these two are not done yet but can be implemented fairly simply?

glusterfs release notes states that there are two potential clients that
can take advantage of this selinux xlator. One, using gluster native FUSE
client and the other using nfs-ganesha. The native FUSE client would
require fairly complex work in the kernel, which is currently not on anybody's
radar. That's why I was curious if nfs-ganesha can take advantage of this
gluster xlator feature with relative ease.

Thanks again for your help.

-Janak




On Thu, Sep 6, 2018 at 12:31 PM Jeff Layton <jlayton@redhat.com> wrote:
On Thu, 2018-09-06 at 12:00 -0400, Janak Gtri wrote:
> The latest version of nfs-ganesha supports nfs v4.2 protocols. Does that include labeled nfs?
>
> Does FSAL for glusterfs have support to get/set labels (extended attributes such as SELinux context)?


Not yet.

Limited server mode should be fairly simple to implement over any FSAL
that supports xattrs or has some other way to store the labels. Full
mode may eventually be possible but would require some way to request
the FSAL to check labels for us.
--
Jeff Layton <jlayton@redhat.com>