From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754507AbdG3RHR (ORCPT ); Sun, 30 Jul 2017 13:07:17 -0400 Received: from mail.linuxfoundation.org ([140.211.169.12]:57804 "EHLO mail.linuxfoundation.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754298AbdG3RHP (ORCPT ); Sun, 30 Jul 2017 13:07:15 -0400 Date: Sun, 30 Jul 2017 08:04:25 -0700 From: Greg Kroah-Hartman To: James Simmons Cc: devel@driverdev.osuosl.org, Andreas Dilger , Oleg Drokin , Robin Humble , Linux Kernel Mailing List , Lustre Development List Subject: Re: [PATCH 18/20] staging: lustre: llite: Remove filtering of seclabel xattr Message-ID: <20170730150425.GA25625@kroah.com> References: <1501082556-17962-1-git-send-email-jsimmons@infradead.org> <1501082556-17962-19-git-send-email-jsimmons@infradead.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.8.3 (2017-05-23) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Jul 27, 2017 at 08:35:33PM +0100, James Simmons wrote: > > > From: Robin Humble > > > > The security.capability xattr is used to implement File > > Capabilities in recent Linux versions. Capabilities are a > > fine grained approach to granting executables elevated > > privileges. eg. /bin/ping can have capabilities > > cap_net_admin, cap_net_raw+ep instead of being setuid root. > > > > This xattr has long been filtered out by llite, initially for > > stability reasons (b15587), and later over performance > > concerns as this xattr is read for every file with eg. > > 'ls --color'. Since LU-2869 xattr's are cached on clients, > > alleviating most performance concerns. > > > > Removing llite's filtering of the security.capability xattr > > enables using Lustre as a root filesystem, which is used on > > some large clusters. > > The commit message for this patch is incorrect. Some how it got > mixed up with another patch which I missed in this push. Please > drop this patch and I will resent the correct patches later. Now dropped.