FilesystemCapabilties

Differences between revisions 2 and 6 (spanning 4 versions)
Revision 2 as of 2010-03-08 19:11:06
Size: 474
Editor: c-76-105-168-175
Comment:
Revision 6 as of 2010-03-08 22:04:16
Size: 721
Editor: c-76-105-168-175
Comment:
Deletions are marked like this. Additions are marked like this.
Line 3: Line 3:
 * "cp -a" works
 * "rsync -AXa" works
== Blockers ==
 * "rsync -AXa" works, but "AX" should be part of "a"
Line 10: Line 10:
 * NFS does not support xattr (patches for NFSv3 exist: http://marc.info/?l=linux-security-module&m=126804495005609&w=2)  * dpkg-deb does not know about xattrs.

== Good ==
 * "cp -a" works

== Bad ==
 * NFS does not support xattr

== Ugly ==
 * libcap2's pam_cap has unexpected parsing results (should allow multiple matches on user)

== Fixed ==
 * libcap2-bin does not install pam_cap.so into the common-auth stack automatically (LP: #534658).

Dumping ground for notes on supporting filesystem capabilities.

Blockers

Good

  • "cp -a" works

Bad

  • NFS does not support xattr

Ugly

  • libcap2's pam_cap has unexpected parsing results (should allow multiple matches on user)

Fixed

  • libcap2-bin does not install pam_cap.so into the common-auth stack automatically (LP: #534658).

Security/FilesystemCapabilties (last edited 2014-12-19 01:09:24 by kees)