[PATCH 0/2] AFS metadata xattr fixes

[Jeffrey E Altman]

On 3/11/2021 9:10 AM, David Howells (dhowells at redhat.com) wrote:
> I wonder if it's better to just hide all the afs.* xattrs from listxattr().
> It would probably be even better to not use xattrs for this, but I'm not
> sure what I would use instead.

I believe that all of the "afs.*" xattrs should be hidden from 
listxattr().  Any "afs.*" xattr that is read from an afs inode can be 
copied to another filesystem and stored.  Attempts to set these values 
in an afs volume will fail.

The use of xattrs is intended to be an alternative to the IBM/OpenAFS 
pioctls which are accessed by processes such as "fs", "aklog", "tokens", 
etc which would know the names of the xattrs and how to use them.   Such 
tools would not require listxattr() to find them.

Thanks for the consideration.

Jeffrey Altman


-------------- next part --------------
A non-text attachment was scrubbed...
Name: jaltman.vcf
Type: text/x-vcard
Size: 271 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/linux-afs/attachments/20210311/19aca85a/attachment-0001.vcf>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4033 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.infradead.org/pipermail/linux-afs/attachments/20210311/19aca85a/attachment-0001.p7s>