On Tue, Aug 29, 2023 at 08:58:13PM +0200, Felix Palmen wrote: > * Dmitry Chagin <dcha...@freebsd.org> [20230829 21:12]: > > On Tue, Aug 29, 2023 at 07:02:22PM +0200, Felix Palmen wrote: > > > So, using user.* works, using system.* doesn't, and maybe a bit > > > surprising(?), dumping all attributes which by default excludes the > > > system namespace doesn't work either. > > > > > > > As expected, the second patch intended to allow access to system > > namespace in jailed env. > > Not exactly, according to the manual, 'getfattr -d' *excludes* the > system namespace by default, so I would have expected it to work. But > maybe that's an issue with the getfattr tool itself. > > > > I still wonder, is the first patch needed anyways? Maybe I fail to > > > understand something here. Won't it map *every* EPERM to ENOSUP and > > > can't this be an issue? > > > > > > > fine, thanks. Gnu tools running under unprivileged user will fail, eg > > ls, which uses getfattr() to get the posix acl > > Ah, I see, that would still break "Linux jails" then... > > Thanks again for quickly fixing this! Can this still make 14.0-RELEASE? > I think yes, thanks for testing, I revised the error handling and made it more precise, can you test new patch in your environment.
https://people.freebsd.org/~dchagin/xattr.patch Revert previous patches
