* [LSF/MM TOPIC] [ATTEND] SELinux and Clustered filesystems
@ 2013-01-23 9:43 Steven Whitehouse
2013-01-23 23:13 ` Andreas Dilger
0 siblings, 1 reply; 2+ messages in thread
From: Steven Whitehouse @ 2013-01-23 9:43 UTC (permalink / raw)
To: lsf-pc, linux-fsdevel; +Cc: Eric Paris
Hi,
One issue which I'd like to resolve, is that of SELinux and clustered
filesystems. We need to try and resolve this as it has been an annoyance
for too long. This issue is related to caching of the SELinux labels and
how updates can/should be propagated from the filesystem to SELinux.
There are some proposals, but no final consensus as to how to proceed.
Depending on exactly how this is eventually resolved, it may need some
modifications to a number of filesystems in order to resolve this. So
this seems like a good forum to bring up the topic.
I would have cc'd the SELinux list too, but that seems to be subscribers
only.
I've asked Eric Paris whether he would like to attend, but at the moment
I don't know whether he is able to make it.
I'm happy to present this topic in any case and explain the proposals,
Steve.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [LSF/MM TOPIC] [ATTEND] SELinux and Clustered filesystems
2013-01-23 9:43 [LSF/MM TOPIC] [ATTEND] SELinux and Clustered filesystems Steven Whitehouse
@ 2013-01-23 23:13 ` Andreas Dilger
0 siblings, 0 replies; 2+ messages in thread
From: Andreas Dilger @ 2013-01-23 23:13 UTC (permalink / raw)
To: Steven Whitehouse; +Cc: lsf-pc, linux-fsdevel, Eric Paris
On 2013-01-23, at 2:43 AM, Steven Whitehouse wrote:
> One issue which I'd like to resolve, is that of SELinux and clustered
> filesystems. We need to try and resolve this as it has been an
> annoyance for too long. This issue is related to caching of the
> SELinux labels and how updates can/should be propagated from the
> filesystem to SELinux.
>
> There are some proposals, but no final consensus as to how to
> proceed. Depending on exactly how this is eventually resolved, it
> may need some modifications to a number of filesystems in order to
> resolve this. So this seems like a good forum to bring up the topic.
>
> I would have cc'd the SELinux list too, but that seems to be
> subscribers only.
>
> I've asked Eric Paris whether he would like to attend, but at the moment I don't know whether he is able to make it.
>
> I'm happy to present this topic in any case and explain the proposals,
I'd definitely be interested to discuss this further. Today, we
require SELinux on Lustre clients be disabled because of the
overhead, but some users would prefer that it work.
Cheers, Andreas
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2013-01-23 23:13 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2013-01-23 9:43 [LSF/MM TOPIC] [ATTEND] SELinux and Clustered filesystems Steven Whitehouse
2013-01-23 23:13 ` Andreas Dilger
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.