Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753638Ab1DRNby (ORCPT ); Mon, 18 Apr 2011 09:31:54 -0400 Received: from mail-qw0-f46.google.com ([209.85.216.46]:32796 "EHLO mail-qw0-f46.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752292Ab1DRNbr convert rfc822-to-8bit (ORCPT ); Mon, 18 Apr 2011 09:31:47 -0400 DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:cc:content-type :content-transfer-encoding; b=bXQ8930XQ0eIkwsYi6ba7gV3U2wXWB+Wrql3e5WmErcAdL4fHFv5sd9s4p/MJlTGPq JgYGyXgD429xcgWR+zQEXOkets638zA2Nr3MDwXeaWiaMV+41L8GcPwlMfZCP0DR5nJS XeC9UJWp//bJdvEvm1NOlhNV/hgE/ydWXBccc= MIME-Version: 1.0 In-Reply-To: References: <4DA4B6A8.7030804@gmail.com> From: Michal Suchanek Date: Mon, 18 Apr 2011 15:31:14 +0200 X-Google-Sender-Auth: OIBbcHktmzith19_G1_v7k6gzcE Message-ID: Subject: Re: Unionmount status? To: Andreas Dilger Cc: Miklos Szeredi , Jiri Kosina , Ric Wheeler , linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, David Howells , Ian Kent , Jeff Moyer , Christoph Hellwig Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8BIT Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1154 Lines: 36 On 16 April 2011 00:18, Andreas Dilger wrote: > On 2011-04-15, at 6:29 AM, Miklos Szeredi wrote: >> Apparently tmpfs does not support generic xattr.  I understand why >> tmpfs is an attractive choice for an upper filesystem, so this should >> be addressed. >> >> I see two options here: >> >> 1) implement generic xattr in tmpfs > > There was a patch posted recently to add xattr support to tmpfs, so that it can use security labels: > > From: Eric Paris > Subject: [PATCH] tmpfs: implement xattr support for the entire security namespace > Date: March 29, 2011 12:56:49 PM MDT > > Cheers, Andreas Applying this patch is not sufficient. Apparently more xattrs are needed but adding them on top of this patch should be easy. The ones mentioned in the overlayfs doc are trusted.overlay.whiteout trusted.overlay.opaque The patch implements security.* Thanks Michal -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/