Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2019-06-12 Thread Colin Watson
On Wed, Jun 12, 2019 at 11:40:57AM -0700, Brian Murray wrote: > For the record, I've found out[1] this is actually an upstream bug in > the documentation for which I have submitted some patches to clarify the > behavior of --xattrs-include. > > [1] https://lists.gnu.org/archive/html/bug-tar/2019-0

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2019-06-12 Thread Brian Murray
On Thu, Aug 02, 2018 at 01:22:07PM +0100, Colin Watson wrote: > On Wed, Aug 01, 2018 at 05:58:56PM -0700, Steve Langasek wrote: > > - Users who are unpacking root tarballs need to take care to pass > >--xattrs-include=* to tar. > > The tar documentation suggests that just --xattrs should be e

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-22 Thread Neal Gompa
On Mon, Aug 6, 2018 at 5:53 PM Steve Langasek wrote: > > Hi John, > > On Mon, Aug 06, 2018 at 10:09:53PM +0100, John Lenton wrote: > > On Mon, 6 Aug 2018 at 21:16, Steve Langasek > > wrote: > > > > I think it's exceedingly unlikely that anyone is going to unpack, and > > > subsequently boot, an

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-15 Thread Jamie Strandboge
On Mon, 2018-08-06 at 23:23 +0100, John Lenton wrote: > On Mon, 6 Aug 2018 at 22:53, Steve Langasek m> wrote: > > > > Thanks, that's a useful data point. Do you think it is a practical > > concern > > for snaps if an Ubuntu rootfs uses fscaps? Is this an argument > > against > > allowing fscaps

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-15 Thread John Lenton
On Mon, 6 Aug 2018 at 21:16, Steve Langasek wrote: > > I think it's exceedingly unlikely that anyone is going to unpack, and > subsequently boot, an Ubuntu root tarball on a filesystem that doesn't > support xattrs. All the filesystems that Ubuntu supports out of the box as > rootfs (in terms of

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-15 Thread Tom H
On Thu, Aug 2, 2018 at 4:10 PM Steve Langasek wrote: > > # tar -c --xattrs /usr/bin/mtr-packet | tar -x --xattrs-include=* FYI, the Gentoo handbook recommends '--xattrs-include="*.*"' for unpacking its tarball. -- ubuntu-devel mailing list ubuntu-devel@lists.ubuntu.com Modify settings or unsubs

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-15 Thread John Lenton
On Mon, 6 Aug 2018 at 22:53, Steve Langasek wrote: > > Thanks, that's a useful data point. Do you think it is a practical concern > for snaps if an Ubuntu rootfs uses fscaps? Is this an argument against > allowing fscaps in Ubuntu, or should it just be a matter for snapcraft to > warn/error abou

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-07 Thread Jamie Strandboge
On Mon, 2018-08-06 at 14:53 -0700, Steve Langasek wrote: > Hi John, > > On Mon, Aug 06, 2018 at 10:09:53PM +0100, John Lenton wrote: > > On Mon, 6 Aug 2018 at 21:16, Steve Langasek > com> wrote: > > > I think it's exceedingly unlikely that anyone is going to unpack, > > > and > > > subsequently b

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-06 Thread Steve Langasek
Hi John, On Mon, Aug 06, 2018 at 10:09:53PM +0100, John Lenton wrote: > On Mon, 6 Aug 2018 at 21:16, Steve Langasek wrote: > > I think it's exceedingly unlikely that anyone is going to unpack, and > > subsequently boot, an Ubuntu root tarball on a filesystem that doesn't > > support xattrs. All

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-06 Thread Steve Langasek
On Mon, Aug 06, 2018 at 02:23:30PM +0100, Robie Basak wrote: > On Wed, Aug 01, 2018 at 05:58:56PM -0700, Steve Langasek wrote: > > This will require bugfixes in various places, but ideally on a one-time > > basis only. The primary areas of concern are: > [...] > > - Users who are unpacking root

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-06 Thread Robie Basak
On Wed, Aug 01, 2018 at 05:58:56PM -0700, Steve Langasek wrote: > This will require bugfixes in various places, but ideally on a one-time > basis only. The primary areas of concern are: [...] > - Users who are unpacking root tarballs need to take care to pass >--xattrs-include=* to tar. I

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-05 Thread Stéphane Graber
On Sun, Aug 05, 2018 at 11:18:49AM -0400, Stéphane Graber wrote: > On Wed, Aug 01, 2018 at 05:58:56PM -0700, Steve Langasek wrote: > > A recent customer bug report revealed that we have packages in the standard > > Ubuntu system (mtr-tiny) which are making use of filesystem capabilities, to > > red

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-05 Thread Stéphane Graber
On Wed, Aug 01, 2018 at 05:58:56PM -0700, Steve Langasek wrote: > A recent customer bug report revealed that we have packages in the standard > Ubuntu system (mtr-tiny) which are making use of filesystem capabilities, to > reduce the need for suid binaries on the system: > > $ getcap /usr/bin/mtr-

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-03 Thread Steve Langasek
On Thu, Aug 02, 2018 at 01:29:26PM -0700, Kees Cook wrote: > > > > - Users who are unpacking root tarballs need to take care to pass > > > >--xattrs-include=* to tar. > > > > - Users who are backing up or streaming Ubuntu root filesystems with > > > > tar or > > > >rsync will need to tak

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-03 Thread Colin Watson
On Wed, Aug 01, 2018 at 05:58:56PM -0700, Steve Langasek wrote: > This will require bugfixes in various places, but ideally on a one-time > basis only. The primary areas of concern are: I think launchpad-buildd needs a couple of fixes for this, but there are some things to fix that aren't quite o

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-02 Thread Dimitri John Ledkov
On 2 August 2018 at 01:58, Steve Langasek wrote: > A recent customer bug report revealed that we have packages in the standard > Ubuntu system (mtr-tiny) which are making use of filesystem capabilities, to > reduce the need for suid binaries on the system: > > $ getcap /usr/bin/mtr-packet > /usr/b

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-02 Thread Kees Cook
On Thu, Aug 02, 2018 at 11:21:28AM -0700, Steve Langasek wrote: > On Thu, Aug 02, 2018 at 09:41:11AM -0700, Kees Cook wrote: > > On Wed, Aug 01, 2018 at 05:58:56PM -0700, Steve Langasek wrote: > > > - Where root filesystems are distributed as tarballs, they are not > > >currently created with

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-02 Thread Steve Langasek
On Thu, Aug 02, 2018 at 09:41:11AM -0700, Kees Cook wrote: > On Wed, Aug 01, 2018 at 05:58:56PM -0700, Steve Langasek wrote: > > - Where root filesystems are distributed as tarballs, they are not > >currently created with --xattrs; this will need to be changed. > What about initramfs? CPIO do

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-02 Thread Kees Cook
On Wed, Aug 01, 2018 at 05:58:56PM -0700, Steve Langasek wrote: > - Where root filesystems are distributed as tarballs, they are not >currently created with --xattrs; this will need to be changed. What about initramfs? CPIO doesn't support xattr: https://lkml.kernel.org/r/1516850875-25066-1-g

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-02 Thread Steve Langasek
On Thu, Aug 02, 2018 at 01:22:07PM +0100, Colin Watson wrote: > On Wed, Aug 01, 2018 at 05:58:56PM -0700, Steve Langasek wrote: > > - Users who are unpacking root tarballs need to take care to pass > >--xattrs-include=* to tar. > The tar documentation suggests that just --xattrs should be eno

Re: RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-02 Thread Colin Watson
On Wed, Aug 01, 2018 at 05:58:56PM -0700, Steve Langasek wrote: > - Users who are unpacking root tarballs need to take care to pass >--xattrs-include=* to tar. The tar documentation suggests that just --xattrs should be enough: By default, when '--xattr' is used, all names are stored in th

RFC: baseline requirements for Ubuntu rootfs: xattrs and fscaps

2018-08-01 Thread Steve Langasek
A recent customer bug report revealed that we have packages in the standard Ubuntu system (mtr-tiny) which are making use of filesystem capabilities, to reduce the need for suid binaries on the system: $ getcap /usr/bin/mtr-packet /usr/bin/mtr-packet = cap_net_raw+ep $ The customer bug report ar