MCS article

[Stephen Smalley]

On Fri, 2006-01-20 at 09:37 -0500, James Morris wrote:
> On Fri, 20 Jan 2006, James Carter wrote:
> 
> > The NFSv4 named attributes are still not implemented on Linux although
> > there has been talk about them over the last month on the NFSv4 mailing
> > list.  Support is just being added to allow specifying a security flavor
> > for each export.
> 
> It's my understanding that these named attributes are not compatible with 
> Linux/BSD extended attributes, as they're based on Solaris ones, which are 
> actually subfiles.

When I mentioned that the NFSv4 named attributes might not be suitable
for our purposes to the Trusted Solaris folks, they said that they
should be and that any lack there is one of the Linux implementation,
not the protocol definition or its intended implementation.

-- 
Stephen Smalley
National Security Agency