commit | a082c6f680da298cf075886ff032f32ccb7c5e1a | [log] [tgz] |
---|---|---|
author | Miklos Szeredi <mszeredi@redhat.com> | Mon May 29 15:15:27 2017 +0200 |
committer | Miklos Szeredi <mszeredi@redhat.com> | Mon May 29 15:15:27 2017 +0200 |
tree | 48a876fd1a7b738f978f5abbfc1e59bcbe288d43 | |
parent | f3a1568582cc207663a4d5e37da790334372855b [diff] |
ovl: filter trusted xattr for non-admin Filesystems filter out extended attributes in the "trusted." domain for unprivlieged callers. Overlay calls underlying filesystem's method with elevated privs, so need to do the filtering in overlayfs too. Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>