Gentoo Archives: gentoo-hardened

From: "Tóth Attila" <atoth@××××××××××.hu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] XATTR_PAX, paxmark.sh, elog, icedtea, and maybe more
Date: Sun, 14 Dec 2014 03:20:45
Message-Id: 152e9a3a4ad1fc2f39ca0966d9be8f22.squirrel@atoth.sote.hu
In Reply to: Re: [gentoo-hardened] XATTR_PAX, paxmark.sh, elog, icedtea, and maybe more by "Rick \\\"Zero_Chaos\\\" Farina"
1 +1 for omitting EXT3. Karl-Johan: you can safely remove that, IMHO.
2 --
3 dr Tóth Attila, Radiológus, 06-20-825-8057
4 Attila Toth MD, Radiologist, +36-20-825-8057
5
6 2014.December 14.(V) 03:34 időpontban Rick \"Zero_Chaos\" Farina ezt írta:
7 > On 12/13/2014 06:52 PM, Karl-Johan Karlsson wrote:
8 >> So it works on ext4, but not ext3, even though both have the ext_attr
9 >> flag on
10 >> disk. Any difference in kernel support?
11 >>
12 >>
13 >> # uname -r
14 >> 3.16.5-hardened
15 >>
16 >> # gunzip -c /proc/config.gz | grep XATTR
17 >> CONFIG_EXT3_FS_XATTR=y
18 >> CONFIG_TMPFS_XATTR=y
19 >> CONFIG_PAX_XATTR_PAX_FLAGS=y
20 >>
21 >> # gunzip -c /proc/config.gz | grep EXT[34]
22 >> CONFIG_EXT3_FS=y
23 >> CONFIG_EXT3_DEFAULTS_TO_ORDERED=y
24 >> CONFIG_EXT3_FS_XATTR=y
25 >> # CONFIG_EXT3_FS_POSIX_ACL is not set
26 >> CONFIG_EXT3_FS_SECURITY=y
27 >> CONFIG_EXT4_FS=y
28 >> CONFIG_EXT4_USE_FOR_EXT23=y
29 >> # CONFIG_EXT4_FS_POSIX_ACL is not set
30 >> CONFIG_EXT4_FS_SECURITY=y
31 >> # CONFIG_EXT4_DEBUG is not set
32 >>
33 >>
34 >
35 > just to narrow it down, can you remove the ext3 modules (or just build
36 > it out of the kernel) and let the ext4 driver handle it? ext4
37 > filesystem driver handles ext2 and ext3, typically with much better
38 > results.
39 >
40 > -Zero
41 >
42 >> Not that I can see, especially with CONFIG_EXT4_USE_FOR_EXT23=y. And it
43 >> should
44 >> be an automatic dependency anyway, since PAX_XATTR_PAX_FLAGS is set.
45 >>
46 >> Which brings us to problem number three: why aren't xattrs working in
47 >> $PORTAGE_TMPDIR on ext3 when they are in /bin on ext4?
48 >>
49 >> Problems one and two are clearly bugs, one in sys-apps/elfix and two in
50 >> sys-
51 >> apps/elfix or the documentation. Should I file them in Bugzilla, or is
52 >> this
53 >> mail enough?
54 >>
55 >> Problem three seems to be unique to this machine. Does anyone know
56 >> what's
57 >> going on?
58 >>
59 >
60 >
61 >