Gentoo Archives: gentoo-dev

From: Alexander Tsoy <alexander@××××.me>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] [rfc] enable USE=xattr by default
Date: Thu, 15 Oct 2015 12:02:22
Message-Id: 20151015150206.69257769@laptop.puleglot.ru
In Reply to: Re: [gentoo-dev] [rfc] enable USE=xattr by default by Alexander Tsoy
1 On Thu, 15 Oct 2015 14:58:01 +0300
2 Alexander Tsoy <alexander@××××.me> wrote:
3
4 > On Thu, 15 Oct 2015 19:47:59 +0800
5 > Jason Zaman <perfinion@g.o> wrote:
6 >
7 > > On Thu, Oct 15, 2015 at 07:38:43AM -0400, Anthony G. Basile wrote:
8 > > > On 10/15/15 7:24 AM, Rich Freeman wrote:
9 > > > > On Thu, Oct 15, 2015 at 6:56 AM, Jason Zaman
10 > > > > <perfinion@g.o> wrote:
11 > > > >> Can you try this:
12 > > > >>
13 > > > >> # getfattr -d -m- /bin/ping
14 > > > >> security.capability=0sAQAAAgAgAAAAAAAAAAAAAAAAAAA=
15 > > > >> # setfattr -n user.test -v "foo" ./ping
16 > > > >> # setfattr -n user.pax.flags -v "me" ./ping
17 > > > >> # getfattr -d -m- /bin/ping
18 > > > >> security.capability=0sAQAAAgAgAAAAAAAAAAAAAAAAAAA=
19 > > > >> user.pax.flags="me"
20 > > > >> user.test="foo"
21 > > > >>
22 > > > >> If this works then something else is causing those messages and
23 > > > >> we should look into it further.
24 > > > > This behaves exactly as described above for me on btrfs, but I
25 > > > > still do get all the error messages whenever I install stuff.
26 > > > >
27 > > > > I assume the extra attributes are harmless and will get removed
28 > > > > the next time I update ping?
29 > > > >
30 > > > okay its good to know that that this does work. something might
31 > > > be misconfigured on tobias's box.
32 > > >
33 > > > let me know any problems with XATTR_PAX markings because that's
34 > > > going to become the default soon and in the near future the only
35 > > > option once we drop the PT_PAX patch from binutils.
36 > >
37 > > I seem to recall something about PaX enabling user.* xattrs on tmpfs
38 > > and mainline kernel supports only security.* on tmpfs. Could that be
39 > > the cause? If that is the case then what do we do about everyone
40 > > that is using gentoo-sources? It probably doesnt matter so just
41 > > silencing the errors is probably enough.
42 > >
43 >
44 > I was wrong. This patch was not merged upstream. It is still needed
45 > and included in latest genpatches for 4.2:
46 >
47 > $ tar tf genpatches-4.2-6.base.tar.xz | grep XATTR
48 > ./1500_XATTR_USER_PREFIX.patch
49 >
50
51 Oops.. Sorry, I replied on the wrong message. This was intended for
52 Tobias.
53
54 --
55 Alexander Tsoy