Re: XATTR_PAX, paxmark.sh, elog, icedtea, and maybe more

Karl-Johan Karlsson <creideiki+gentoo-hardened-p3ZhATDdJdqYedhux8xOaQ@public.gmane.org>
Newsgroups gmane.linux.gentoo.hardened
Organization Ferretporn
Message-ID <2216040.01TE29sHTg@orley>
On Thu 18 Dec 2014 19.58.11 Anthony G. Basile wrote:
> On 12/13/14 18:52, Karl-Johan Karlsson wrote:
> > So it works on ext4, but not ext3, even though both have the ext_attr flag
> > on disk. Any difference in kernel support?
> 
> Because on ext3 you need to add user_xattr to the mount options.  Either
> `mount -o user_xattr` or in fstab in column 4 like this
> 
> /dev/sdb5 /tmp	ext3 user_xattr 0 1
> 
> Its automatic on ext4.  `man mount` for more info.  Please let me know
> if this works for you.

Aha! I was unaware of that mount option. mount(8) documents it, but is unclear 
on what the default value is. attr(5) says it's needed on ext2, ext3 and 
reiserfs, but says nothing about ext4.

Unfortunately, the machine is in production, and since it works without that 
option when using the ext4 code to read ext3, I would prefer to leave it alone 
for now.

> Is that in the Pax_Quickstart?  If not we should
> add it.

It is not in PaX_Quickstart. It is mentioned in passing in 
<https://wiki.gentoo.org/wiki/Netflix/Pipelight>, which is not the first place 
I would have thought to look :)

-- 
Karl-Johan Karlsson
signature.asc (application/pgp-signature, 181 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEABEIAAYFAlSTwPkACgkQAbrEtTMfrn3ZWQCeJ1K3EJM03R1pSuzpClVzuPp8
yjwAoIDWMsN68B+XNQpZwwjQ8T48QTQC
=oUDb
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.