LWN.net Logo

(2/3) SELinux context mount support - NFS

From:  James Morris <jmorris@redhat.com>
To:  Andrew Morton <akpm@osdl.org>, Alexander Viro <aviro@redhat.com>
Subject:  [PATCH] (2/3) SELinux context mount support - NFS
Date:  Wed, 4 Feb 2004 10:31:51 -0500 (EST)
Cc:  Stephen Smalley <sds@epoch.ncsc.mil>, <linux-kernel@vger.kernel.org>, <selinux@tycho.nsa.gov>, Chris Wright <chrisw@osdl.org>, <trond.myklebust@fys.uio.no>

This patch modifies the kernel's NFS mount data structure to include 
SELinux context mount data.  It allows NFS fileystems to be labeled on a 
per-mountpoint basis, and should not affect existing versions of 
userspace mount.

(A patch to the userspace mount code is available at 
http://people.redhat.com/jmorris/selinux/context_mounts/)

 include/linux/nfs_mount.h |    4 +++-
 1 files changed, 3 insertions(+), 1 deletion(-)


diff -urN -X dontdiff linux-2.6.2.p/include/linux/nfs_mount.h linux-2.6.2.w/include/linux/nfs_mount.h
--- linux-2.6.2.p/include/linux/nfs_mount.h	2003-09-27 20:50:06.000000000 -0400
+++ linux-2.6.2.w/include/linux/nfs_mount.h	2004-02-04 09:08:10.306809336 -0500
@@ -20,7 +20,8 @@
  * mount-to-kernel version compatibility.  Some of these aren't used yet
  * but here they are anyway.
  */
-#define NFS_MOUNT_VERSION	5
+#define NFS_MOUNT_VERSION	6
+#define NFS_MAX_CONTEXT_LEN	256
 
 struct nfs_mount_data {
 	int		version;		/* 1 */
@@ -41,6 +42,7 @@
 	unsigned int	bsize;			/* 3 */
 	struct nfs3_fh	root;			/* 4 */
 	int		pseudoflavor;		/* 5 */
+	char		context[NFS_MAX_CONTEXT_LEN + 1];	/* 6 */
 };
 
 /* bits in the flags field */




-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Copyright © 2004, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds