Re: selinux and rsync backup to zfs dataset

On Sonntag, 7. Juni 2026 16:01:58 Mitteleuropäische Sommerzeit Andrei 
Borzenkov wrote:
> 07.06.2026 16:08, [email protected] wrote:
> > On Sonntag, 7. Juni 2026 14:03:27 Mitteleuropäische Sommerzeit
> > Andrei
> > 
> > Borzenkov wrote:
> >> 07.06.2026 13:38, [email protected] wrote:
> >>> Hi,
> >>> 
> >>> my clients and my backup machine are both configured using
> >>> selinux,
> >>> but are still in permissive mode.
> >>> A backup script is running on the client, that wants to backup
> >>> data
> >>> via rsync to the server.
> >>> If the rsync option --xattrs is used, I get errors like this:
> >>> 
> >>> rsync: [receiver] rsync_xal_set:
> >>> lremovexattr("<file>","security.selinux") failed: Permission
> >>> denied
> >>> (13)
> >>> 
> >>> for every file to backup.
> >>> 
> >>> This is obviously not caused by selinux, because in permissive
> >>> mode
> >>> it should not prevent this action, but perhaps by zfs option
> >>> xattr=sa for the target dataset. Is that correct? And if so, how
> >>> can I avoid it besides removing --xattrs?
> >> 
[...]
> 
> You can skip security.selinux extended attribute with "--filter=-x
> security.selinux", but then all labels are lost.

That didn't help, I still get 

> >>> rsync: [receiver] rsync_xal_set:
> >>> lremovexattr("<file>","security.selinux") failed: Permission
> >>> denied
> >>> (13)

unless I omit --xattrs!