Re: [gentoo-hardened] SElinux on filesystems other than ext[23]

[Chris PeBenito]

On Sun, 2003-11-16 at 15:52, Tad wrote:
> I have been experimenting with running SELinux on filesystems other than
> ext2 and ext3. My first attempt was with reiserfs(3.6) plus some patches
> from SUSE. I was able to get it (sort of) working after I fixed a locking
> issue. I found that it was a bit slow and tended to loose corrupt the
> context label. I decided that the xattr patch for reiserfs was just to slow
> and hackish.

Its unfortunate that ReiserFS only has those patches.  I'm told that
Hans Reiser is against extended attributes, so Reiser4 may or may not
have them.

> To get SElinux to work on XFS all that seems needed is a minor change to
> xfs_iops.[hc] so that it will recognize and allow security.* xattrs. I've
> made the changes, and created a 2.4.21 kernel with XFS, the ea+acl patchset
> and SElinux.
>
> I'm testing my changes right now and would like to know if anyone else is
> interested in a SElinux+xfs combination.

I myself don't use XFS; however, if you drop a link to your fixed XFS
patches, and the patch to add the security. handling I'd be happy to
look at them, and possibly add them to selinux-sources.  It would be
more difficult to add it to hardened-sources, but that is a possibility
too.

What would be even more useful is if you could create a patch for 2.6. 
Then we could test it, send it over to the NSA so they could try it out
too.  If we could get it into 2.6, that'd be great.  It would probably
have to be a configure option, like it is for ext[23].

-- 
Chris PeBenito
<pebenito@g.o>
Developer,
Hardened Gentoo Linux
Embedded Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243