Toshiharu Harada wrote:

LSM version of TOMOYO Linux is already in 2.6.29-git tree and is
expected to be merged in 2.6.30.

Really?! That's great! Getting it mainlined will help
motivate a lot more people to experiment with it,
which will be really great for the project.

Congratulations!

-- Tim

=============================
Tim Bird
Architecture Group Chair, CE Linux Forum
Senior Staff Engineer, Sony Corporation of America
=============================

On 2009/03/31, at 4:09, Tim Bird wrote:

KaiGai Kohei wrote:

I got a question about xattr support on yaffs2, but I didn't
have enough information for the filesystem to give him any
suggestion.

Is it possible anyone to give him any suggestion of information?

It looks like Nishant already asked on the yaffs mailing list.
That's good.

If you don't hear anything there, you might also try contacting
Charles Manning (the yaffs author) directly via the information at:
http://www.yaffs.net/contact

Let us know what you find out. I'm interested in this as well.
This could, if desired by enough people, be an interesting
candidate for a project by CELF or it's members.

Another thing to check on is whether SELinux still requires
attributes on every single filesystem object. SMACK supports
mount-level attributes, which can be inherited down onto
individual files. (This is OK for read-only filesystems, but
may not make much sense for a read/write filesystem.)

Or if your requirements allow, let me suggest TOMOYO Linux. :-)
TOMOYO Linux runs happily on any file systems cause it's "pathname- based", not
"label based". ;-)

http://tomoyo.sourceforge.jp/en/2.2.x/
http://lwn.net/Articles/277833/

LSM version of TOMOYO Linux is already in 2.6.29-git tree and is
expected to be merged in 2.6.30. We had to shape its functionalities
to make it merged. LSM version supports only MAC for files.
If functionalities are the top priority, please try our latest and most
powerful non-LSM version.

http://tomoyo.sourceforge.jp/en/1.6.x/

Cheers,
Toshiharu Harada

Tim Bird wrote:

KaiGai Kohei wrote:

I got a question about xattr support on yaffs2, but I didn't
have enough information for the filesystem to give him any
suggestion.

Is it possible anyone to give him any suggestion of information?

It looks like Nishant already asked on the yaffs mailing list.
That's good.
If you don't hear anything there, you might also try contacting
Charles Manning (the yaffs author) directly via the information at:
http://www.yaffs.net/contact
Let us know what you find out. I'm interested in this as well.
This could, if desired by enough people, be an interesting
candidate for a project by CELF or it's members.
Another thing to check on is whether SELinux still requires
attributes on every single filesystem object. SMACK supports
mount-level attributes, which can be inherited down onto
individual files. (This is OK for read-only filesystems, but
may not make much sense for a read/write filesystem.)

SELinux also provides mount-level labeling on filesystem objects,
though it has a tradeoff in granularity of access controls.

We can specify it with "context=<security context>" option in
the mount command for read/write filesystem. It enables to handle
all the filesystem objects (including newly created ones) are
labeled as the specified security context.

Thanks,
--
OSS Platform Development Division, NEC
KaiGai Kohei <kaigai@...>

KaiGai Kohei wrote:

I got a question about xattr support on yaffs2, but I didn't
have enough information for the filesystem to give him any
suggestion.

Is it possible anyone to give him any suggestion of information?

It looks like Nishant already asked on the yaffs mailing list.
That's good.

If you don't hear anything there, you might also try contacting
Charles Manning (the yaffs author) directly via the information at:
http://www.yaffs.net/contact

Let us know what you find out. I'm interested in this as well.
This could, if desired by enough people, be an interesting
candidate for a project by CELF or it's members.

Another thing to check on is whether SELinux still requires
attributes on every single filesystem object. SMACK supports
mount-level attributes, which can be inherited down onto
individual files. (This is OK for read-only filesystems, but
may not make much sense for a read/write filesystem.)

Regards,
-- Tim

=============================
Tim Bird
Architecture Group Chair, CE Linux Forum
Senior Staff Engineer, Sony Corporation of America
=============================

I got a question about xattr support on yaffs2, but I didn't
have enough information for the filesystem to give him any
suggestion.

Is it possible anyone to give him any suggestion of information?

Thanks,