freebsd security - Feb 2009 - MAC subsystem and ZFS?

Hello,

I'm trying to upgrade the configuration of some web services, already  
using the MAC subsystem, to use ZFS instead of UFS, but I see that ZFS  
doesn't support MAC labels, even for a whole filesystem, which would  
be fine for me, I don't need multilabel support.

Any ideas? Have I missed anything?





Borja.

On Thu, 5 Feb 2009, Borja Marcos wrote:
> I'm trying to upgrade the configuration of some web services, already
using
> the MAC subsystem, to use ZFS instead of UFS, but I see that ZFS
doesn't
> support MAC labels, even for a whole filesystem, which would be fine for
me,
> I don't need multilabel support.
>
> Any ideas? Have I missed anything?
Hmmm.  Sounds like a bug -- all file systems should be able to operate in 
single-label mode, even if they don't support EAs and multilabel mode. 
Could
you describe the symptoms you're experiencing in a bit more detail?

Robert N M Watson
Computer Laboratory
University of Cambridge