David P. Quigley | 4 Jan 2010 21:31
Picon

Adding a new export option

I remember a while back hearing something about the export code being
rewritten. Was that the case or was I misremembering something else? I
want to add a new export option for Labeled NFS and I've been crawling
through the existing export code. If it is going to be changed I'll hold
off on this for now otherwise I'll keep working on it. Also looking at
the security flavor code it looks like those values get converted from a
string into a number. Is there a good example of an export option that
passes a complete string to the kernel?

Dave
Steve Dickson | 4 Jan 2010 21:58
Picon
Favicon

Re: Adding a new export option


On 01/04/2010 03:31 PM, David P. Quigley wrote:
> I remember a while back hearing something about the export code being
> rewritten. Was that the case or was I misremembering something else? I
> want to add a new export option for Labeled NFS and I've been crawling
> through the existing export code. If it is going to be changed I'll hold
> off on this for now otherwise I'll keep working on it. Also looking at
> the security flavor code it looks like those values get converted from a
> string into a number. Is there a good example of an export option that
> passes a complete string to the kernel?
> 
I would wait a bit until we get the pseudo code ironed out... 
I believe we have the kernel code set and Bruce is about to post
some mountd code that will complete the picture... Hopefully this will
be all set by the EOW... 

steved.
J. Bruce Fields | 4 Jan 2010 22:04

Re: Adding a new export option

On Mon, Jan 04, 2010 at 03:58:24PM -0500, Steve Dickson wrote:
> 
> 
> On 01/04/2010 03:31 PM, David P. Quigley wrote:
> > I remember a while back hearing something about the export code being
> > rewritten. Was that the case or was I misremembering something else? I
> > want to add a new export option for Labeled NFS and I've been crawling
> > through the existing export code. If it is going to be changed I'll hold
> > off on this for now otherwise I'll keep working on it. Also looking at
> > the security flavor code it looks like those values get converted from a
> > string into a number. Is there a good example of an export option that
> > passes a complete string to the kernel?

You could look at fsloc or uuid.

> I would wait a bit until we get the pseudo code ironed out... 
> I believe we have the kernel code set and Bruce is about to post
> some mountd code that will complete the picture... Hopefully this will
> be all set by the EOW... 

Yes.  There aren't any changes to the kernel export parsing code (e.g.,
svc_export_parse()), though, so it may be independent from your changes.

What were you thinking your new option would look like?

--b.
David P. Quigley | 4 Jan 2010 22:12
Picon

Re: Adding a new export option

On Mon, 2010-01-04 at 16:04 -0500, J. Bruce Fields wrote:
> On Mon, Jan 04, 2010 at 03:58:24PM -0500, Steve Dickson wrote:
> > 
> > 
> > On 01/04/2010 03:31 PM, David P. Quigley wrote:
> > > I remember a while back hearing something about the export code being
> > > rewritten. Was that the case or was I misremembering something else? I
> > > want to add a new export option for Labeled NFS and I've been crawling
> > > through the existing export code. If it is going to be changed I'll hold
> > > off on this for now otherwise I'll keep working on it. Also looking at
> > > the security flavor code it looks like those values get converted from a
> > > string into a number. Is there a good example of an export option that
> > > passes a complete string to the kernel?
> 
> You could look at fsloc or uuid.
> 
> > I would wait a bit until we get the pseudo code ironed out... 
> > I believe we have the kernel code set and Bruce is about to post
> > some mountd code that will complete the picture... Hopefully this will
> > be all set by the EOW... 
> 
> Yes.  There aren't any changes to the kernel export parsing code (e.g.,
> svc_export_parse()), though, so it may be independent from your changes.
> 
> What were you thinking your new option would look like?
> 
> --b.

So basically in Labeled NFS we currently use the LSM framework to parse
and set labels on the files on the server. One of the operation modes is
(Continue reading)


Gmane