All of lore.kernel.org
 help / color / mirror / Atom feed
From: James Carter <jwcart2@epoch.ncsc.mil>
To: lky <lky77@sjtu.edu.cn>
Cc: SELinux <selinux@tycho.nsa.gov>
Subject: Re: can't use ACL with 2.4 SELinux
Date: 04 Nov 2003 11:35:31 -0500	[thread overview]
Message-ID: <1067963731.15639.24.camel@moss-lions.epoch.ncsc.mil> (raw)
In-Reply-To: <006201c3a16d$bf3c1980$5d38a8c0@lky>

On Sun, 2003-11-02 at 13:18, lky wrote:
>     Hi, I installed 2.4.21-selinux2 (linux-2.4-2003100110.tgz) on Redhat9.0. Because the SElinux kernel has the combined ea+acl+nfsacl patch built in. So I think I can use ACL directly. But I failed. I have enabled the kernel options for ACLs and I mount the file system as follows: 'mount -t ext3 -o exec,dev,suid,rw,acl,user_xattr /dev/hda8 /mnt/test'
> but it said : operations not supported. Any ideas?
>     Thanks!

I tried the kernel from our website (linux-2.4-2003100110.tgz) with
following ext3 options (and all the other normal options for SELinux):
CONFIG_EXT3_FS=y
CONFIG_EXT3_FS_XATTR=y
CONFIG_EXT3_FS_XATTR_SHARING=y
CONFIG_EXT3_FS_XATTR_USER=y
CONFIG_EXT3_FS_XATTR_TRUSTED=y
CONFIG_EXT3_FS_POSIX_ACL=y
CONFIG_EXT3_FS_SECURITY=y

I had no problem mounting my root ext3 filesystem with both the acl and
user_xattr options.  I had no problems setting and getting user,
trusted, and security.selinux extended attributes.  I also had no
problems setting and getting acls.  It doesn't seem to be a problem with
the kernel.

-- 
James Carter <jwcart2@epoch.ncsc.mil>
National Security Agency

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

  reply	other threads:[~2003-11-04 16:35 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-11-02 18:18 can't use ACL with 2.4 SELinux lky
2003-11-04 16:35 ` James Carter [this message]
2003-11-05 17:28   ` lky

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1067963731.15639.24.camel@moss-lions.epoch.ncsc.mil \
    --to=jwcart2@epoch.ncsc.mil \
    --cc=lky77@sjtu.edu.cn \
    --cc=selinux@tycho.nsa.gov \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.