From c9c1483f5867fe0c3d252060e59a3b0f5d32360a Mon Sep 17 00:00:00 2001 From: Colin Walters Date: Fri, 29 Jul 2016 14:16:51 -0400 Subject: [PATCH] postprocess: Also pick up user.pax.flags This is in use by [PaX](https://en.wikipedia.org/wiki/PaX); see also the [Arch Linux wiki](https://wiki.archlinux.org/index.php/PaX). Closes: #412 Closes: #414 Approved by: copumpkin --- src/libpriv/rpmostree-postprocess.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/src/libpriv/rpmostree-postprocess.c b/src/libpriv/rpmostree-postprocess.c index 0f1b82e9..df298811 100644 --- a/src/libpriv/rpmostree-postprocess.c +++ b/src/libpriv/rpmostree-postprocess.c @@ -1711,8 +1711,11 @@ read_xattrs_cb (OstreeRepo *repo, gpointer user_data) { int rootfs_fd = GPOINTER_TO_INT (user_data); - /* Hardcoded at the moment, we're only taking file caps */ - static const char *accepted_xattrs[] = { "security.capability" }; + /* If you have a use case for something else, file an issue */ + static const char *accepted_xattrs[] = + { "security.capability", /* https://lwn.net/Articles/211883/ */ + "user.pax.flags" /* https://github.com/projectatomic/rpm-ostree/issues/412 */ + }; guint i; g_autoptr(GVariant) existing_xattrs = NULL; gs_free_variant_iter GVariantIter *viter = NULL;