[gentoo-dev] Re: fcaps.eclass: bringing filesystem capabilities to the tree

[Duncan <1i5t5.duncan@cox.net>]

Mike Frysinger posted on Fri, 25 Jan 2013 18:51:44 -0500 as excerpted:

> else
> 	local fstype=$(stat -f -c %T "${file}")
> 	ewarn "Could not set caps on '${file}' due to missing filesystem support."
> 	ewarn "Make sure you enable XATTR support for '${fstype}' in your kernel."
> fi

This needs a bit more information, please.
I had XATTR support enabled, but it wasn't enough.

For at least reiserfs, and presumably for ext4, since it has
similar kconfig options, *_FS_XATTR isn't enough,
*_FS_SECURITY must be enabled as well.

(*_FSPOSIX_ACL did NOT need to be enabled, however.)

So:

ewarn "Make sure you enable XATTR and SECURITY attribute
support for ${fstype} in your kernel."

Unfortunately, kernel-help for *_FS_SECURITY implies that it only needs
to be enabled for SELinux or the like, recommending that it be disabled
if you're not running such modules.  Is it worth filing an upstream
mainline kernel bug on that as well, suggesting that it mention file-caps
as well?

-- 
Duncan - List replies preferred.   No HTML msgs.
"Every nonfree program has a lord, a master --
and if you use the program, he is your master."  Richard Stallman