= Proposed System Wide Change: Enable SELinux Labeled NFS Support =
Change owner(s): Daniel Walsh <dwalsh(a)redhat.com>, Steve Dickson
The Linux Kernel has grown support for passing SELinux labels between a client
and server using NFS.
== Detailed description ==
We have always needed to treat NFS mounts with a single label usually
something like nfs_t. Or at best allow an administrator to override the
default with a label using the mount --context option. With this change we
have lots of different Labels supported on an NFS share.
== Scope ==
* Steve Dickson needs to make sure nfs-utils works properly.
* Dan Walsh needs to make sure selinux-policy works properly in all use cases.
Other developers: Kernel
* Turn on Labeled NFS in the Fedora Kernel, Fix any policy issues that arise
because of this. I believe this is mainly a testing issue, and that the
functionality is complete.
Release engineering: N/A (No changes for Release Engineering)
Policies and guidelines: N/A (not affected)