A 2001 paper on SELinux that I have discusses SELinux’s ability to control access to file systems mounted from ordinary NFS servers. It says that each file will be labeled based upon the NFS server identity. It goes on to say that separate labels for different file systems mounted from the same NFS server could be supported but is not currently implemented.

 

Does fedora provide this capability? And if so, is the granularity of the labeling based upon NFS server identity or file system?

 

Thanks,

  Mike