Openembedded Core Discussions
 help / color / mirror / Atom feed
From: Patrick Ohly <patrick.ohly@intel.com>
To: openembedded-core@lists.openembedded.org
Subject: [PATCH 0/3] preserve xattrs in images
Date: Tue, 11 Aug 2015 10:44:57 +0200	[thread overview]
Message-ID: <cover.1439281753.git.patrick.ohly@intel.com> (raw)

Both Smack and IMA/EVM rely on xattrs in the rootfs. This works for
.ext3/.ext4 images, but not for .jffs2 and .tar.bz2. These changes
allow optionally building also such images with xattrs without
changing the default (which still is to ignore xattrs in .jffs2 and
.tar.bz2).

The default does not get changed because supporting xattrs causes a
certain overhead (need to build GNU tar, additional system calls when
creating the images).

See https://github.com/01org/meta-intel-iot-security/pull/34 for code using
these changes.

The following changes since commit 5094354a2811825e6d60963f03959daa349cab23:

  bind: upgrade to 9.10.2-p3 (2015-08-09 15:14:32 -0700)

are available in the git repository at:

  git://github.com/pohly/openembedded-core xattr
  https://github.com/pohly/openembedded-core/tree/xattr

Patrick Ohly (3):
  tar-replacement-native: avoid race condition with host tar
  image_types.bbclass: allow replacing tar command
  mtd-utils: keep xattr support enabled

 meta/classes/image_types.bbclass                         | 13 ++++++++++++-
 meta/recipes-devtools/mtd/mtd-utils_git.bb               |  2 +-
 meta/recipes-extended/tar/tar-replacement-native_1.28.bb | 14 +++++++++++++-
 3 files changed, 26 insertions(+), 3 deletions(-)

-- 
2.1.4



             reply	other threads:[~2015-08-11  8:45 UTC|newest]

Thread overview: 30+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-08-11  8:44 Patrick Ohly [this message]
2015-08-11  8:44 ` [PATCH 1/3] tar-replacement-native: avoid race condition with host tar Patrick Ohly
2015-08-14 10:47   ` Burton, Ross
2015-08-14 11:01     ` Paul Eggleton
2015-08-14 11:03       ` Burton, Ross
2015-08-14 14:52         ` Patrick Ohly
2015-08-14 14:56           ` Paul Eggleton
2015-08-14 15:38             ` Patrick Ohly
2015-08-14 16:29               ` Paul Eggleton
2015-08-14 14:59           ` [PATCH v2 0/2] xattr + tar Patrick Ohly
2015-08-14 14:59             ` [PATCH v2 1/2] tar-replacement-native: relocate via NATIVE_PACKAGE_PATH_SUFFIX Patrick Ohly
2015-08-14 15:07               ` Burton, Ross
2015-08-14 16:01                 ` [PATCH v3 0/2] xattr + tar Patrick Ohly
2015-08-14 16:01                   ` [PATCH v3 1/2] tar-replacement-native: relocate via NATIVE_PACKAGE_PATH_SUFFIX Patrick Ohly
2015-08-14 16:01                   ` [PATCH v3 2/2] image_types.bbclass: allow replacing tar command Patrick Ohly
2015-08-14 14:59             ` [PATCH v2 " Patrick Ohly
2015-08-11  8:44 ` [PATCH 2/3] " Patrick Ohly
2015-08-11  8:45 ` [PATCH 3/3] mtd-utils: keep xattr support enabled Patrick Ohly
2015-08-11 14:33   ` Burton, Ross
2015-08-12  9:33     ` Patrick Ohly
2015-08-14 10:51       ` Burton, Ross
2015-08-25 11:46         ` Patrick Ohly
2015-08-25 13:26           ` Mark Hatle
2015-08-25 13:46             ` Andrea Adami
2015-08-25 15:27             ` Patrick Ohly
2015-08-25 19:49               ` Mark Hatle
2015-08-11 14:29 ` [PATCH 0/3] preserve xattrs in images Burton, Ross
2015-08-12  9:28   ` Patrick Ohly
2015-08-12 14:34 ` Mark Hatle
2015-08-12 14:44   ` Patrick Ohly

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=cover.1439281753.git.patrick.ohly@intel.com \
    --to=patrick.ohly@intel.com \
    --cc=openembedded-core@lists.openembedded.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox