Re: [RFC PATCH v2 1/9] smb: client: support security.capability over EAs

Namjae Jeon <[email protected]> Mon, 20 Jul 2026 14:21:27 +0900
Newsgroups org.kernel.vger.linux-cifs,org.kernel.vger.linux-kernel
Message-ID <CAKYAXd8CkqDd5uc4Mdtt3N5XRqVk7kC1nedqkCpV3RxQ+mcOng@mail.gmail.com>
On Fri, Jul 17, 2026 at 12:40 PM Ze Tan <[email protected]> wrote:
>
> generic/093 uses setcap and getcap to check that a write clears the file
> capability. The CIFS client does not have a security xattr handler, so
> these commands cannot set or read security.capability through SMB EAs.
>
> Register a security xattr handler and build the complete EA name for
> SET_INFO and QUERY_INFO. Keep security.capability unchanged in EA lists.
> Reject other security xattrs.
>
> Signed-off-by: Ze Tan <[email protected]>
The client exposes these EA names through security.* regardless of
whether SMB3 POSIX extensions were
negotiated. Is that right?