> Of course, just to make things more interesting, while it's true that
all
> SELinux contexts are stored as extended attributes, not all extended
> attributes are necessarily SELinux contexts.  While I don't know of
any
> other
> popular uses offhand, there's nothing preventing them from being used
to
> store
> icons, user specified tags, or other such user specified metadata.

Exactly my point. Rather than hack something up just for SELinux
security contexts, if Bacula handled extended attributes as general
items that can be set/cleared with the xattr library (or platform
equivalent), we'd have the ability to deal with just about any kind of
object metadata we want to store (and could get rid of the Unix-oriented
permissions mask requirement in the default stream, which makes no sense
on non-Unix systems). 

We can then handle the items that this platform understands and flag the
ones that it doesn't understand. If the platform doesn't understand
extended attributes at all, then you'd have a way to fall back
gracefully by ignoring what you can't understand. 

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Bacula-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bacula-devel

Reply via email to