On Wed, 8 Apr 2009, Nicolas Williams wrote: > Therein lies the interop problem. Will SELinux and Solaris TX interop > with the labeled NFSv4 protocol we're working on? Evidently: not w/o > policy agreement (that was Jarret's point, which kick-started this > thread on the NFSv4 WG list). I don't know about TX, but it seems possible that someone might want to make SELinux with an MLS policy interoperate with a different MLS platform (note that this would not apply in the case of interop with purely legacy systems, as they won't have NFSv4.x support). I have no idea how likely this scenario is, and I wouldn't try to accommodate this goal in the protocol unless a stakeholder could make a solid case for it. Note that we should expect interoperability between Solaris FMAC and SELinux (i.e. the same security model implemented on different platforms, like Unix DAC). - James -- James Morris <jmorris at namei.org>
Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.