[OpenWrt-Devel] Enable security labels on ext4?

W. Michael Petullo mike at flyn.org
Sat Nov 10 22:59:08 EST 2018


Capabilities are an important security mechanism on Linux because they
allow programs to run with fewer privileges. I would like to propose that
we enable security labels by default on filesystems like ext4. This is
done by selecting the following kernel build option:

	File systems -> (The Extended 4 (ext4) filesystem) Ext4 Security
	Labels

I have already submitted a pull request which should allow
our build servers to provide the corresponding libcap utilities. See:

	https://github.com/openwrt/packages/pull/7368

-- 
Mike

:wq

_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel



More information about the openwrt-devel mailing list