On Wed, Aug 30, 2023 at 11:20:39AM +0200, Felix Palmen wrote: > * Dmitry Chagin <dcha...@freebsd.org> [20230830 11:57]: > > On Tue, Aug 29, 2023 at 08:58:13PM +0200, Felix Palmen wrote: > > > Thanks again for quickly fixing this! Can this still make 14.0-RELEASE? > > > > > I think yes, thanks for testing, I revised the error handling and made > > it more precise, can you test new patch in your environment. > > > > https://people.freebsd.org/~dchagin/xattr.patch > > Great, thanks! I see you now chose to add a jail option, certainly the > cleanest solution. > > Will test later today. Just to make sure I have the correct expectation > about the behavior with the new patch applied: > > * Unprivileged user will get ENOTSUP when trying to access the system > namespace (regardless of the new jail setting), so GNU tools like e.g. > coreutils install should "just work". ENOTSUP or ENODATA (getxattr)
> * Root will get either ENOTSUP, or a fully working access to system.* > with the new jail setting enabled. > > Are these assumptions correct? > yes
