Greetings! Ive been looking everywhere for more information and came upon this website. So, straight to the point, I have configured ganesha to export a file directory as nfsv4.2 with security_label = true so i can have selinux mls labels propagate between server and client but after mounting the server on the client and verifying flags, the security_label flag does not appear and the files inside the mount remain at a default state of sensitivity level 0. Im hoping people here experienced in ganesha are able to help me fix this issue. Please and thank you
Ganesha does not yet have support for security labels. Sorry, Frank Filz -----Original Message----- From: alexpagan01@gmail.com [mailto:alexpagan01@gmail.com] Sent: Wednesday, March 4, 2026 1:09 PM To: devel@lists.nfs-ganesha.org Subject: [NFS-Ganesha-Devel] Ganesha and SELinux Greetings! Ive been looking everywhere for more information and came upon this website. So, straight to the point, I have configured ganesha to export a file directory as nfsv4.2 with security_label = true so i can have selinux mls labels propagate between server and client but after mounting the server on the client and verifying flags, the security_label flag does not appear and the files inside the mount remain at a default state of sensitivity level 0. Im hoping people here experienced in ganesha are able to help me fix this issue. Please and thank you _______________________________________________ Devel mailing list -- devel@lists.nfs-ganesha.org To unsubscribe send an email to devel-leave@lists.nfs-ganesha.org
I see. But Im a little confused. Ganesha has NFSv4.2 support which has labeled NFS as a bonus, and also has the Security_Label boolean on the man page for the export config. Wouldnt that some how indicate that it does? Or is it non-functional?
Hi, generally speaking, every feature in NFSv4.2 is optional, so just because it's in the 4.2 spec does not mean any particular server supports it. There does seem to be support for Security fattrs in ../Protocols/NFS/nfs_proto_tools.c. In the five minutes I spent looking at it it was not clear to me how it's related to selinux fattrs. It's definitely in the realm of things we'd consider addressing On Thu, Mar 5, 2026 at 6:48 AM <alexpagan01@gmail.com> wrote:
I see. But Im a little confused. Ganesha has NFSv4.2 support which has labeled NFS as a bonus, and also has the Security_Label boolean on the man page for the export config. Wouldnt that some how indicate that it does? Or is it non-functional? _______________________________________________ Devel mailing list -- devel@lists.nfs-ganesha.org To unsubscribe send an email to devel-leave@lists.nfs-ganesha.org
-- Kaleb
participants (4)
-
Alex Pagan -
alexpagan01＠gmail.com
-
Frank Filz -
Kaleb Keithley