Research
.
Skip Search Box

SELinux Mailing List

Re: SELinux compatible with XFS?

From: Michael Tiemann <tiemann_at_redhat.com>
Date: Tue, 20 Mar 2001 07:06:13 -0500


We've been doing extensive testing of the 2.4 kernel, and there are all sorts of exciting ways in which it can corrupt _any_ filesystem (it's one reason we haven't released a 2.4-based product ;-). We're working hard with others to fix those problems. I wouldn't blame XFS just yet.

M

Jose Nazario wrote:

> On Mon, 19 Mar 2001, Howard Holm wrote:
>
> 

>> While I'm not completely familiar with XFS, my understanding is that
>> one of its advantages is that it stores extended attributes with the
>> files.  So, it should, hopefully, be relatively easy to add a PSID to
>> the extended file attributes.  That said, it isn't one of NSA's
>> priorities to add that support.  If someone else wants it enough to do
>> the work, we'd certainly like to see the results made available.

>
>
> i'd like to chime in with some notes from the field and some links.
>
> first up, we've just migrated *away* from XFS on some early 2.4 kernels on
> out local LUG server, lockups and IO problems were just too great. that is
> to say that this may have been fixed in recent releases of the 2.4 kernel
> and the XFS source. i hope so, we would hover around 8 hours of uptime on
> a busy server.
>
> however, Linus is not happy to import large chunks of code into the
> kernel, which will probably slow the adoption of XFS in Linux. also, they
> recently officialy merged Reiser in, albeit you have to request
> experimental code.
>
> but, having been using XFS on IRIX for many, many years, i can say it's
> one high performance filesystem. and yes, it does have extended attributes
> on Linux, like MACLs and such. very nice, indeed. hence, with whatever
> little weight i have here (i don't code stuff for you guys, for example),
> i would like to vote for XFS in SELinux over other filesystems. i know
> that SGI could use the help, and i know that the features of XFS would be
> well utilized in SELinux.
>
> some papers on XFS have appeared, and are available in large measure at:
>
> http://linux-xfs.sgi.com/projects/xfs/publications.html
>
> later,
>
> ____________________________
> jose nazario jose@cwru.edu
> PGP: 89 B0 81 DA 5B FD 7E 00 99 C3 B2 CD 48 A0 07 80
 > PGP key ID 0xFD37F4E5 (pgp.mit.edu)
>
>
> --
> You have received this message because you are subscribed to the selinux list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.
--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Tue 20 Mar 2001 - 07:24:51 EST
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

  
bottom
National Security Agency / Central Security Service