Jeff Soule writes:
 > On 27 Jun 2001 11:53:54 -0700, Nikita Danilov wrote:
 > > Jeff Soule writes:
 > >  > Greetings,
 > >  > 
 > >  > I am experimenting with reiserfs with the following configuration:
 > >  > Base system RedHat 7.0
 > >  > Kernel 2.4.5
 > >  > linux-2.4.5-reiserfs-quota+knfsd.patch
 > >  > 
 > >  > Everything looks good except for file attributes.  I can not set or list
 > >  > file attributes in the reiserfs partition...
 > >  > 
 > >  > Is this a known problem?
 > > 
 > > Yes, it is. File attributes (immutable, append-only etc.) are ext2
 > > specific feature.
 > 
 > Ugh I was thinking of that just as I clicked send :-)
 > 
 > Another question...
 > Is LIDS compatible with reiserfs?  That would remove the need and be a

No, but reiserfs v4 is targeting much more ambitious security features.

 > better way to protect system files then setting attributes that could
 > still be easly changed by root...

Actually, I have a reminiscence of immutable flag only begin allowed to
be changed in the single-user mode. I cannot find a trace of this in the
current kernel code. May be this was from the pre-capabilities,
securebits driven security framework.

Anyway, this looks like user-mode solvable problem: just teach
/sbin/init to drop CAP_LINUX_IMMUTABLE on leaving single-user.

 > 
 > > 
 > > There is a patch to support them in ReiserFS, but it was not extensively
 > > tested. Anyway, only immutable, sync and noatime attributes will work.
 > > 
 > > If anyone is interested, I'll post it.
 > 
 > I would be interested.

So, take it.

Patch is against 2.4.5. All attributes are inherited from the parent
directory. Only "immutable" and "noatime" actually work. "nodump"
attribute changed to mean "notail": suppress storing of the last portion
of a file in the tree itself.

 > 
 > 
 > Thanks,
 > /Jeff

Nikita.

 > > 
 > >  >                           Did I miss something in the docs?
 > >  > 
 > >  > Any help would be appreciated :-)
 > > 
 > > Nikita.
 > > 
 > >  > 
 > >  > Thanks,
 > >  > /Jeff
 > >  > 
 > >  > --
 > >  > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 > >  > Jeff SoulИ
 > >  > System Administrator: Web Crossing Inc.
 > >  > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 > >  > Yes, I've heard of "decaf." What's your point?
 > >  > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 > --
 > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 > Jeff Soulé
 > System Administrator: Web Crossing Inc.
 > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 > Windows: Just another pane in the glass.
 > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

diff-1.d.gz

Reply via email to