Package: bsdtar
Version: 2.8.4-1
Severity: normal

Currently bsdtar allways create archives which includes all information about
file,
including extended attributes.

It is possible to ignore this information on extraction.

But there should be possible to ignore this information also on cration,
for example when we are creating archive not for archiving purpose,
but for somebody else (for example distributing our source codes).
Extended attributes could contain some sensitive private data,
which can be even created automatically (consider beagle, or backup
metadata, or metadata used by version control system, ecryptfs
keys, etc).

Simples way is to have new option, --disable-xattr which will just skip
xattr reading (and so will not write any to archive).

In future, it could be extended to only include xattrs which match/not-match
a given regexp. It could be also used then so tar will also use xattr
to retrive/store which file to archive or was archived (and when, and into what
file). For example
according to http://freedesktop.org/wiki/CommonExtendedAttributes:

       user.xdg.robots.backup: On a file: "true" to index, "false" to not
backup.
       On a directory: "true" to traverse the into the directory for backup,
       "false" for not traversing into it.'''

But disableing on demand for now would be most usefull.



-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-xen-686 (SMP w/1 CPU core)
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to pl_PL.UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages bsdtar depends on:
ii  libacl1           2.2.49-3               Access control list shared library
ii  libarchive1       2.8.4-1                Single library to read/write tar, 
ii  libattr1          1:2.4.44-2             Extended attribute shared library
ii  libbz2-1.0        1.0.5-4                high-quality block-sorting file co
ii  libc6             2.11.2-2               Embedded GNU C Library: Shared lib
ii  liblzma2          4.999.9beta+20100713-1 XZ-format compression library
ii  libxml2           2.7.7.dfsg-4           GNOME XML library
ii  zlib1g            1:1.2.3.4.dfsg-3       compression library - runtime

bsdtar recommends no packages.

Versions of packages bsdtar suggests:
pn  bsdcpio                       <none>     (no description available)

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to