On 08/13/2012 03:42 PM, [1]sf...@users.sourceforge.net wrote: Hello Shachar,
Shachar Shemesh: At the moment, I can't seem to get things to work, because the capabilities, despite being set on the original file, are not seen by the kernel on through aufs. Is this something I'm missing? Won't you describe more specificaly? What do you call "the capabilities", capget(2)/capset(2), ACL or XATTR? In other words, what did you do (as your set-up and operation) and what do you expect as its result? Hello, and thank you for getting back to me so quickly. I am using the getcap(8) command line utility. According to strace, it is calling capget(2) on the file, resulting is EOPNOTSUPP. The mount is done using the following fstab: none . aufs br=/srv/os1=rw:/srv/baseos=ro 0 0 /srv is a single file system the file being queried resides on /srv/baseos. There is no such file on /srv/os1. Getcap on /srv/baseos directly works and gives the correct result. The system is Ubuntu server 12.04 with kernel 3.2.0-29-generic. Aufs is the one that was compiled into that kernel. I hope this provides all the information you need. Thank you, Shachar References 1. mailto:sf...@users.sourceforge.net ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/