Gentoo Archives: gentoo-hardened

From: "Anthony G. Basile" <basile@××××××××××××××.edu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] XATTR_PAX, paxmark.sh, elog, icedtea, and maybe more
Date: Fri, 19 Dec 2014 11:12:27
Message-Id: 5494082E.2010108@opensource.dyc.edu
In Reply to: Re: [gentoo-hardened] XATTR_PAX, paxmark.sh, elog, icedtea, and maybe more by James Taylor
1 On 12/19/14 01:51, James Taylor wrote:
2 >
3 > -----BEGIN PGP SIGNED MESSAGE-----
4 > Hash: SHA1
5 >
6 >
7 > On 2014/12/19 17:08, Karl-Johan Karlsson wrote:
8 >> On Thu 18 Dec 2014 19.58.11 Anthony G. Basile wrote:
9 >>> On 12/13/14 18:52, Karl-Johan Karlsson wrote:
10 >>>> So it works on ext4, but not ext3, even though both have the
11 > ext_attr flag
12 >>>> on disk. Any difference in kernel support?
13 >>>
14 >>> Because on ext3 you need to add user_xattr to the mount options. Either
15 >>> `mount -o user_xattr` or in fstab in column 4 like this
16 >>>
17 >>> /dev/sdb5 /tmp ext3 user_xattr 0 1
18 >>>
19 >>> Its automatic on ext4. `man mount` for more info. Please let me know
20 >>> if this works for you.
21 >>
22 >> Aha! I was unaware of that mount option. mount(8) documents it, but is
23 > unclear
24 >> on what the default value is. attr(5) says it's needed on ext2, ext3 and
25 >> reiserfs, but says nothing about ext4.
26 >>
27 >> Unfortunately, the machine is in production, and since it works
28 > without that
29 >> option when using the ext4 code to read ext3, I would prefer to leave
30 > it alone
31 >> for now.
32 >>
33
34 > Would mount -oremount,user_xattr be an option? Or am I missing the point :)'
35
36
37 This would probably work.
38
39
40 --
41 Anthony G. Basile, Ph. D.
42 Chair of Information Technology
43 D'Youville College
44 Buffalo, NY 14201
45 (716) 829-8197