Miklos Szeredi a082c6f680 ovl: filter trusted xattr for non-admin ...

Filesystems filter out extended attributes in the "trusted." domain for
unprivlieged callers.

Overlay calls underlying filesystem's method with elevated privs, so need
to do the filtering in overlayfs too.

Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>

2017-05-29 15:15:27 +02:00

12 KiB

Raw Blame History

View Raw