From owner-freebsd-security@FreeBSD.ORG  Sat Feb  7 22:21:54 2009
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id E7B581065678
	for <freebsd-security@freebsd.org>;
	Sat,  7 Feb 2009 22:21:54 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from cyrus.watson.org (cyrus.watson.org [65.122.17.42])
	by mx1.freebsd.org (Postfix) with ESMTP id C40408FC0A
	for <freebsd-security@freebsd.org>;
	Sat,  7 Feb 2009 22:21:54 +0000 (UTC)
	(envelope-from rwatson@FreeBSD.org)
Received: from fledge.watson.org (fledge.watson.org [65.122.17.41])
	by cyrus.watson.org (Postfix) with ESMTPS id 503B146B03;
	Sat,  7 Feb 2009 17:21:54 -0500 (EST)
Date: Sat, 7 Feb 2009 22:21:54 +0000 (GMT)
From: Robert Watson <rwatson@FreeBSD.org>
X-X-Sender: robert@fledge.watson.org
To: Borja Marcos <BORJAMAR@SARENET.ES>
In-Reply-To: <5F581D71-E6BF-487D-91F0-67EA6A21BA6E@SARENET.ES>
Message-ID: <alpine.BSF.2.00.0902072220480.89719@fledge.watson.org>
References: <5F581D71-E6BF-487D-91F0-67EA6A21BA6E@SARENET.ES>
User-Agent: Alpine 2.00 (BSF 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: freebsd-security@freebsd.org
Subject: Re: MAC subsystem and ZFS?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 07 Feb 2009 22:21:55 -0000


On Thu, 5 Feb 2009, Borja Marcos wrote:

> I'm trying to upgrade the configuration of some web services, already using 
> the MAC subsystem, to use ZFS instead of UFS, but I see that ZFS doesn't 
> support MAC labels, even for a whole filesystem, which would be fine for me, 
> I don't need multilabel support.
>
> Any ideas? Have I missed anything?

Hmmm.  Sounds like a bug -- all file systems should be able to operate in 
single-label mode, even if they don't support EAs and multilabel mode.  Could 
you describe the symptoms you're experiencing in a bit more detail?

Robert N M Watson
Computer Laboratory
University of Cambridge