From sacadmin Tue Nov 14 13:54:07 2006 Received: from sr1-umpk-17.SFBay.Sun.COM (sr1-umpk-17.SFBay.Sun.COM [129.146.11.199]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id kAELs7HG001324; Tue, 14 Nov 2006 13:54:07 -0800 (PST) Received: from sr1-umpk-17.sfbay.sun.com (localhost [127.0.0.1]) by sr1-umpk-17.SFBay.Sun.COM (8.13.7+Sun/8.13.7) with ESMTP id kAELrwLg013288; Tue, 14 Nov 2006 13:53:58 -0800 (PST) Received: (from ahrens@localhost) by sr1-umpk-17.sfbay.sun.com (8.13.7+Sun/8.13.7/Submit) id kAELrvCt013242; Tue, 14 Nov 2006 13:53:57 -0800 (PST) Date: Tue, 14 Nov 2006 13:53:57 -0800 (PST) From: Matthew Ahrens Message-Id: <200611142153.kAELrvCt013242@sr1-umpk-17.sfbay.sun.com> To: PSARC@sac.sfbay.sun.com Cc: Chris.Kirby@sun.com Subject: noxattr zfs property [PSARC/2006/638 Timeout: 11/22/2006] Status: RO Content-Length: 2363 Subject: PSARC FastTrack [11/22/2006]: noxattr zfs property Template Version: @(#)sac_nextcase %I% %G% SMI This information is Copyright 2006 Sun Microsystems, Inc. 1. Introduction 1.1. Project/Component Working Name: noxattr zfs property 1.2. Name of Document Author/Supplier: Author: Chris Kirby 1.3 Date of This Document: 14 November, 2006 4. Technical Description This case adds a new property to ZFS. The stability of the property is committed, and the release binding is patch/micro. SUMMARY: This proposal is to allow ZFS file systems to be mounted with extended attributes disabled. PROBLEM: The current version of zfs does not allow disabling of extended attributes. For security reasons, it has been requested that we provide this option to prevent users from hiding files outside of the regular name space. This is CR 6351954. PROPOSED SOLUTION: The proposed solution is as follows: 1) Create a new zfs mount property, "xattr", which defaults to "on" to maintain existing ZFS default extended attribute behavior. This property may be set to "off" to prevent users from accessing the extended attribute name space. Attempts to access extended attributes will fail with EINVAL, just as they do when UFS is mounted -onoxattr. 2) Update the man page for zfs to include the new xattr property and update the Temporary Mount Point Properties to reflect the xattr/noxattr mount options. ISSUES: none MANPAGE CHANGES: System Administration Commands zfs(1M) [...] Native Properties [...] + xattr=on | off + + Controls whether extended attributes are enabled for this + file system. The default value is "on". [...] Temporary Mount Point Properties [...] PROPERTY MOUNT OPTION [...] setuid setuid/nosetuid + xattr xattr/noxattr [...] # zfs get -o property,value,source all pool/home/bob PROPERTY VALUE SOURCE [...] + xattr on default 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack From sacadmin Tue Nov 14 14:26:00 2006 Received: from sfbaymail2sca.sfbay.sun.com (sfbaymail2sca.SFBay.Sun.COM [129.145.155.42]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id kAEMQ00h001908 for ; Tue, 14 Nov 2006 14:26:00 -0800 (PST) Received: from brmea-mail-1.sun.com (brmea-mail-1.Sun.COM [192.18.98.31]) by sfbaymail2sca.sfbay.sun.com (8.13.6+Sun/8.12.10/ENSMAIL,v2.2) with ESMTP id kAEMPxc0005719 for ; Tue, 14 Nov 2006 14:25:59 -0800 (PST) Received: from fe-amer-03.sun.com ([192.18.108.177]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id kAEMPwWa005052 for ; Tue, 14 Nov 2006 15:25:58 -0700 (MST) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J8Q00601RA8KJ00@mail-amer.sun.com> (original mail from Torrey.McMahon@Sun.COM) for PSARC@sac.sfbay.sun.com; Tue, 14 Nov 2006 15:25:58 -0700 (MST) Received: from [192.168.1.100] ([69.143.27.128]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J8Q004ZCRN8JWX6@mail-amer.sun.com>; Tue, 14 Nov 2006 15:25:56 -0700 (MST) Date: Tue, 14 Nov 2006 17:26:05 -0500 From: Torrey McMahon Subject: Re: noxattr zfs property [PSARC/2006/638 Timeout: 11/22/2006] In-reply-to: <200611142153.kAELrvCt013242@sr1-umpk-17.sfbay.sun.com> Sender: Torrey.McMahon@Sun.COM To: Matthew Ahrens Cc: PSARC@sac.sfbay.sun.com, chris.kirby@Sun.COM Message-id: <455A427D.8090900@sun.com> Organization: Sun Microsystems Inc. MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <200611142153.kAELrvCt013242@sr1-umpk-17.sfbay.sun.com> User-Agent: Thunderbird 1.5.0.8 (Windows/20061025) Status: RO Content-Length: 1061 Matthew Ahrens wrote: > > PROBLEM: > > The current version of zfs does not allow disabling of > extended attributes. For security reasons, it has been > requested that we provide this option to prevent users > from hiding files outside of the regular name space. > This is CR 6351954. > > > > This property may be set to "off" to prevent users from > accessing the extended attribute name space. Attempts > to access extended attributes will fail with EINVAL, > just as they do when UFS is mounted -onoxattr. > Would it make sense to place a slightly revised version of the above ... > > MANPAGE CHANGES: > > System Administration Commands zfs(1M) > > [...] > > Native Properties > > [...] > > + xattr=on | off > + > + Controls whether extended attributes are enabled for this > + file system. The default value is "on". > > ... at this point in the man page to avoid the "Why would you want to do such a thing?" q&a session? From sacadmin Tue Nov 14 15:13:14 2006 Received: from engmail3mpk.sfbay.Sun.COM (engmail3mpk.SFBay.Sun.COM [129.146.11.26]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id kAENDEqZ002943 for ; Tue, 14 Nov 2006 15:13:14 -0800 (PST) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by engmail3mpk.sfbay.Sun.COM (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id kAENDD6k009565; Tue, 14 Nov 2006 15:13:14 -0800 (PST) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id kAENGhPj006707; Tue, 14 Nov 2006 15:16:43 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id kAENGhJ0006706; Tue, 14 Nov 2006 15:16:43 -0800 (PST) Date: Tue, 14 Nov 2006 15:16:43 -0800 (PST) From: Gary Winiger Message-Id: <200611142316.kAENGhJ0006706@marduk.eng.sun.com> To: PSARC@sac.sfbay.sun.com, ahrens@sr1-umpk-17.sfbay.sun.com Cc: Chris.Kirby@sun.com Subject: Re: noxattr zfs property [PSARC/2006/638 Timeout: 11/22/2006] Status: RO Content-Length: 476 > This property may be set to "off" to prevent users from > accessing the extended attribute name space. Attempts > to access extended attributes will fail with EINVAL, > just as they do when UFS is mounted -onoxattr. Hummm, this doesn't seem to be documetned in the 3 May 2006 version of mount_ufs(1M). Is this a man page bug? Am I looking in the wrong place? I wanted to find how the parallel was expressed in ufs. Gary.. From sacadmin Tue Nov 14 16:26:30 2006 Received: from sfbaymail1sca.SFBay.Sun.COM (sfbaymail1sca.SFBay.Sun.COM [129.145.154.35]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id kAF0QUwn008044 for ; Tue, 14 Nov 2006 16:26:30 -0800 (PST) Received: from brmea-mail-4.sun.com (brmea-mail-4.Sun.COM [192.18.98.36]) by sfbaymail1sca.SFBay.Sun.COM (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id kAF0QTDb021120 for ; Tue, 14 Nov 2006 16:26:30 -0800 (PST) Received: from fe-amer-03.sun.com ([192.18.108.177]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id kAF0QTsL018219 for ; Tue, 14 Nov 2006 17:26:29 -0700 (MST) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J8Q00K01X4PCU00@mail-amer.sun.com> (original mail from chris.kirby@sun.com) for PSARC@sac.sfbay.sun.com; Tue, 14 Nov 2006 17:26:29 -0700 (MST) Received: from [129.147.50.217] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J8Q003D7X84CP40@mail-amer.sun.com>; Tue, 14 Nov 2006 17:26:29 -0700 (MST) Date: Tue, 14 Nov 2006 18:26:32 -0600 From: Chris Kirby Subject: Re: noxattr zfs property [PSARC/2006/638 Timeout: 11/22/2006] In-reply-to: <200611142316.kAENGhJ0006706@marduk.eng.sun.com> Sender: Christopher.Kirby@sun.com To: Gary Winiger Cc: PSARC@sac.sfbay.sun.com, ahrens@sr1-umpk-17.sfbay.sun.com Message-id: <455A5EB8.4010503@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-Accept-Language: en-us, en References: <200611142316.kAENGhJ0006706@marduk.eng.sun.com> User-Agent: Mozilla Thunderbird 1.0 (Macintosh/20041206) Status: RO Content-Length: 655 Gary Winiger wrote: >> This property may be set to "off" to prevent users from >> accessing the extended attribute name space. Attempts >> to access extended attributes will fail with EINVAL, >> just as they do when UFS is mounted -onoxattr. > > > Hummm, this doesn't seem to be documetned in the 3 May 2006 > version of mount_ufs(1M). Is this a man page bug? Am I looking > in the wrong place? > I wanted to find how the parallel was expressed in ufs. It doesn't appear to be mentioned on the mount_ufs man page. I thought maybe I'd find it on the fsattr(5) page, but I don't see it there either. -Chris From sacadmin Tue Nov 14 16:27:41 2006 Received: from sfbaymail2sca.sfbay.sun.com (sfbaymail2sca.SFBay.Sun.COM [129.145.155.42]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id kAF0RenO008081 for ; Tue, 14 Nov 2006 16:27:40 -0800 (PST) Received: from brmea-mail-4.sun.com (brmea-mail-4.Sun.COM [192.18.98.36]) by sfbaymail2sca.sfbay.sun.com (8.13.6+Sun/8.12.10/ENSMAIL,v2.2) with ESMTP id kAF0Rb26005419 for ; Tue, 14 Nov 2006 16:27:37 -0800 (PST) Received: from fe-amer-04.sun.com ([192.18.108.178]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id kAF0RakB020275 for ; Tue, 14 Nov 2006 17:27:36 -0700 (MST) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J8Q00701WNX5300@mail-amer.sun.com> (original mail from chris.kirby@sun.com) for PSARC@sac.sfbay.sun.com; Tue, 14 Nov 2006 17:27:36 -0700 (MST) Received: from [129.147.50.217] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J8Q008E7XA0Z340@mail-amer.sun.com>; Tue, 14 Nov 2006 17:27:36 -0700 (MST) Date: Tue, 14 Nov 2006 18:27:39 -0600 From: Chris Kirby Subject: Re: noxattr zfs property [PSARC/2006/638 Timeout: 11/22/2006] In-reply-to: <455A427D.8090900@sun.com> Sender: Christopher.Kirby@sun.com To: Torrey McMahon Cc: Matthew Ahrens , PSARC@sac.sfbay.sun.com Message-id: <455A5EFB.6090402@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-Accept-Language: en-us, en References: <200611142153.kAELrvCt013242@sr1-umpk-17.sfbay.sun.com> <455A427D.8090900@sun.com> User-Agent: Mozilla Thunderbird 1.0 (Macintosh/20041206) Status: RO Content-Length: 1243 Torrey McMahon wrote: > Matthew Ahrens wrote: > >> >> PROBLEM: >> >> The current version of zfs does not allow disabling of >> extended attributes. For security reasons, it has been >> requested that we provide this option to prevent users >> from hiding files outside of the regular name space. >> This is CR 6351954. >> >> >> >> This property may be set to "off" to prevent users from >> accessing the extended attribute name space. Attempts >> to access extended attributes will fail with EINVAL, >> just as they do when UFS is mounted -onoxattr. >> > > > > Would it make sense to place a slightly revised version of the above ... > >> >> MANPAGE CHANGES: >> >> System Administration Commands zfs(1M) >> >> [...] >> >> Native Properties >> >> [...] >> >> + xattr=on | off >> + >> + Controls whether extended attributes are enabled for this >> + file system. The default value is "on". >> >> > > > > ... at this point in the man page to avoid the "Why would you want to do > such a thing?" q&a session? > That makes sense. I'll expand the property description to provide a brief explanation. -Chris From sacadmin Tue Nov 14 16:33:14 2006 Received: from zion.eng.sun.com (zion.SFBay.Sun.COM [129.146.17.75]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id kAF0XEiX008386 for ; Tue, 14 Nov 2006 16:33:14 -0800 (PST) Received: from [129.146.17.75] (zion [129.146.17.75]) by zion.eng.sun.com (8.13.7+Sun/8.13.7) with ESMTP id kAF0XD3c021262; Tue, 14 Nov 2006 16:33:14 -0800 (PST) Message-ID: <455A6049.3010103@sun.com> Date: Tue, 14 Nov 2006 16:33:13 -0800 From: Matthew Ahrens User-Agent: Mail/News 1.5.0.4 (X11/20060613) MIME-Version: 1.0 To: Chris Kirby CC: Gary Winiger , PSARC@sac.sfbay.sun.com, ahrens@sr1-umpk-17.sfbay.sun.com Subject: Re: noxattr zfs property [PSARC/2006/638 Timeout: 11/22/2006] References: <200611142316.kAENGhJ0006706@marduk.eng.sun.com> <455A5EB8.4010503@sun.com> In-Reply-To: <455A5EB8.4010503@sun.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Status: RO Content-Length: 782 Chris Kirby wrote: > Gary Winiger wrote: >>> This property may be set to "off" to prevent users from >>> accessing the extended attribute name space. Attempts >>> to access extended attributes will fail with EINVAL, >>> just as they do when UFS is mounted -onoxattr. >> >> >> Hummm, this doesn't seem to be documetned in the 3 May 2006 >> version of mount_ufs(1M). Is this a man page bug? Am I looking >> in the wrong place? >> I wanted to find how the parallel was expressed in ufs. > > It doesn't appear to be mentioned on the mount_ufs man page. > I thought maybe I'd find it on the fsattr(5) page, but > I don't see it there either. Mark Shellenbaum reports that this is in fact just a bug in the ufs manpage. --matt From sacadmin Tue Nov 14 20:43:45 2006 Received: from sfbaymail2sca.sfbay.sun.com (sfbaymail2sca.SFBay.Sun.COM [129.145.155.42]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id kAF4hiL7016013 for ; Tue, 14 Nov 2006 20:43:44 -0800 (PST) Received: from brmea-mail-3.sun.com (brmea-mail-3.Sun.COM [192.18.98.34]) by sfbaymail2sca.sfbay.sun.com (8.13.6+Sun/8.12.10/ENSMAIL,v2.2) with ESMTP id kAF4hifJ022837 for ; Tue, 14 Nov 2006 20:43:44 -0800 (PST) Received: from fe-amer-04.sun.com ([192.18.108.178]) by brmea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id kAF4hiH0016385 for ; Tue, 14 Nov 2006 21:43:44 -0700 (MST) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J8R00J018G2Q700@mail-amer.sun.com> (original mail from chris.kirby@sun.com) for PSARC@sac.sfbay.sun.com; Tue, 14 Nov 2006 21:43:44 -0700 (MST) Received: from [10.33.199.46] (host147.stsn.com [63.77.69.147]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J8R008Z094SZ340@mail-amer.sun.com>; Tue, 14 Nov 2006 21:43:44 -0700 (MST) Date: Tue, 14 Nov 2006 22:43:43 -0600 From: Chris Kirby Subject: Re: noxattr zfs property [PSARC/2006/638 Timeout: 11/22/2006] In-reply-to: <455A427D.8090900@sun.com> Sender: Christopher.Kirby@sun.com To: Torrey McMahon Cc: Matthew Ahrens , PSARC@sac.sfbay.sun.com Message-id: <455A9AFF.3090005@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-Accept-Language: en-us, en References: <200611142153.kAELrvCt013242@sr1-umpk-17.sfbay.sun.com> <455A427D.8090900@sun.com> User-Agent: Mozilla Thunderbird 1.0 (Macintosh/20041206) Status: RO Content-Length: 1428 Torrey McMahon wrote: > Matthew Ahrens wrote: > >> >> PROBLEM: >> >> The current version of zfs does not allow disabling of >> extended attributes. For security reasons, it has been >> requested that we provide this option to prevent users >> from hiding files outside of the regular name space. >> This is CR 6351954. >> >> >> >> This property may be set to "off" to prevent users from >> accessing the extended attribute name space. Attempts >> to access extended attributes will fail with EINVAL, >> just as they do when UFS is mounted -onoxattr. >> > > > > Would it make sense to place a slightly revised version of the above ... > >> >> MANPAGE CHANGES: >> >> System Administration Commands zfs(1M) >> >> [...] >> >> Native Properties >> >> [...] >> >> + xattr=on | off >> + >> + Controls whether extended attributes are enabled for this >> + file system. The default value is "on". >> >> > > > > ... at this point in the man page to avoid the "Why would you want to do > such a thing?" q&a session? > After a bit more thought and another look at the ZFS man page, I think I should provide the rationale for this property in the ZFS Admin Guide instead. The man page gives basic explanations for existing properties, and I'd like to stick with that style. Seem reasonable? -Chris From sacadmin Tue Nov 14 21:08:17 2006 Received: from sfbaymail1sca.SFBay.Sun.COM (sfbaymail1sca.SFBay.Sun.COM [129.145.154.35]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id kAF58H15017212 for ; Tue, 14 Nov 2006 21:08:17 -0800 (PST) Received: from brmea-mail-3.sun.com (brmea-mail-3.Sun.COM [192.18.98.34]) by sfbaymail1sca.SFBay.Sun.COM (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id kAF58H2r014848 for ; Tue, 14 Nov 2006 21:08:17 -0800 (PST) Received: from fe-amer-06.sun.com ([192.18.108.180]) by brmea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id kAF58FgO009282 for ; Tue, 14 Nov 2006 22:08:15 -0700 (MST) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J8R00B01951IG00@mail-amer.sun.com> (original mail from Torrey.McMahon@Sun.COM) for PSARC@sac.sfbay.sun.com; Tue, 14 Nov 2006 22:08:15 -0700 (MST) Received: from [192.168.1.100] ([69.143.27.128]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J8R00975A9NXPH0@mail-amer.sun.com>; Tue, 14 Nov 2006 22:08:15 -0700 (MST) Date: Wed, 15 Nov 2006 00:08:22 -0500 From: Torrey McMahon Subject: Re: noxattr zfs property [PSARC/2006/638 Timeout: 11/22/2006] In-reply-to: <455A9AFF.3090005@sun.com> Sender: Torrey.McMahon@Sun.COM To: Chris Kirby Cc: Matthew Ahrens , PSARC@sac.sfbay.sun.com Message-id: <455AA0C6.1030907@sun.com> Organization: Sun Microsystems Inc. MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <200611142153.kAELrvCt013242@sr1-umpk-17.sfbay.sun.com> <455A427D.8090900@sun.com> <455A9AFF.3090005@sun.com> User-Agent: Thunderbird 1.5.0.8 (Windows/20061025) Status: RO Content-Length: 335 Chris Kirby wrote: > > After a bit more thought and another look at the ZFS man > page, I think I should provide the rationale for this > property in the ZFS Admin Guide instead. The man page > gives basic explanations for existing properties, and I'd like > to stick with that style. > > Seem reasonable? > Seems reasonable to me. From sacadmin Wed Nov 15 04:09:16 2006 Received: from sfbaymail1sca.SFBay.Sun.COM (sfbaymail1sca.SFBay.Sun.COM [129.145.154.35]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id kAFC9GYY000599 for ; Wed, 15 Nov 2006 04:09:16 -0800 (PST) Received: from gmp-ea-fw-1.sun.com (gmpes-gis-mail-2.UK.Sun.COM [129.156.42.6]) by sfbaymail1sca.SFBay.Sun.COM (8.13.6+Sun/8.13.6/ENSMAIL,v2.2) with ESMTP id kAFC9FeW010176 for ; Wed, 15 Nov 2006 04:09:16 -0800 (PST) Received: from d1-emea-09.sun.com ([192.18.2.119]) by gmp-ea-fw-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id kAFC99RM023478 for ; Wed, 15 Nov 2006 12:09:10 GMT Received: from conversion-daemon.d1-emea-09.sun.com by d1-emea-09.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0J8R00K01TOLTT00@d1-emea-09.sun.com> (original mail from Darren.Moffat@Sun.COM) for PSARC@sac.sfbay.sun.com; Wed, 15 Nov 2006 12:09:09 +0000 (GMT) Received: from [129.157.18.194] by d1-emea-09.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0J8R00JPETR1NJ20@d1-emea-09.sun.com>; Wed, 15 Nov 2006 12:09:06 +0000 (GMT) Date: Wed, 15 Nov 2006 12:08:58 +0000 From: Darren J Moffat Subject: Re: noxattr zfs property [PSARC/2006/638 Timeout: 11/22/2006] In-reply-to: <200611142153.kAELrvCt013242@sr1-umpk-17.sfbay.sun.com> Sender: Darren.Moffat@Sun.COM To: Matthew Ahrens Cc: PSARC@sac.sfbay.sun.com, chris.kirby@Sun.COM Message-id: <455B035A.7070903@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <200611142153.kAELrvCt013242@sr1-umpk-17.sfbay.sun.com> User-Agent: Thunderbird 1.5.0.5 (X11/20060925) Status: RO Content-Length: 639 No objection on providing the symmetry with ufs. However it once again points out (well to me anyway) that we really really (and I quite frank don't care what POSIX or some other standard thinks is says) need the distinction between xattrs that are application based (say something like what the mime type of a file is) and ones that are system based (say something like forced privileges or a file label or a "signature" of some sort). Yes not this case I know, but I just wanted to remind people. If there is input on my "However" please direct it to security-discuss@opensolaris.org not this case. Thanks. -- Darren J Moffat From sacadmin Wed Nov 15 16:15:15 2006 Received: from zion.eng.sun.com (zion.SFBay.Sun.COM [129.146.17.75]) by sac.sfbay.sun.com (8.13.6+Sun/8.13.6) with ESMTP id kAG0FFc6012252 for ; Wed, 15 Nov 2006 16:15:15 -0800 (PST) Received: from [129.146.17.75] (zion [129.146.17.75]) by zion.eng.sun.com (8.13.7+Sun/8.13.7) with ESMTP id kAG0FE3A029635; Wed, 15 Nov 2006 16:15:15 -0800 (PST) Message-ID: <455BAD92.8030805@sun.com> Date: Wed, 15 Nov 2006 16:15:14 -0800 From: Matthew Ahrens User-Agent: Mail/News 1.5.0.4 (X11/20060613) MIME-Version: 1.0 To: Torrey McMahon CC: PSARC@sac.sfbay.sun.com, chris.kirby@sun.com Subject: Re: noxattr zfs property [PSARC/2006/638 Timeout: 11/22/2006] References: <200611142153.kAELrvCt013242@sr1-umpk-17.sfbay.sun.com> <455A427D.8090900@sun.com> In-Reply-To: <455A427D.8090900@sun.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Status: RO Content-Length: 52 This case was approved at today's meeting. --matt