Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.project > #9682

Re: Automatic downloading of non-free software by stuff in main

Show all headers | View raw

On Thu, Dec 07, 2017 at 01:33:41AM +0000, Ben Hutchings wrote:
> On Wed, 2017-12-06 at 19:14 -0500, Michael Stone wrote:
> > On Thu, Dec 07, 2017 at 12:09:22AM +0000, Ben Hutchings wrote:
> > > That's only because it lives in mm/shmem.c, not under fs/.  It does
> > > support xattrs.
> > 
> > Have you tried it?
> 
> Ah, damnit.  It supports *some* xattrs (like the security namespace),
> but apparently not *user* xattrs.

Good.  While xattrs have some uses, this is a hidden privacy hole most users
aren't aware of (although /tmp/ is the filesystem least likely to be used
forensically against you).

Looks like the only filesystems that allow disabling it via a mount option
(nouser_xattr) are ext* and reiserfs, some more can do it via recompiling
the kernel although this kills all xattrs, not just the user: namespace;
most of these config options say "If unsure, say N." (other than CIFS, which
is also the filesystem where your files are most likely to be readable by
others) -- but they're all enabled in Debian kernels.

[~]$ task add "patch btrfs for mount -o nouser_xattr"


Meow!
-- 
⢀⣴⠾⠻⢶⣦⠀ 14:13 < icenowy[m]> are they hot enough? ;-)
⣾⠁⢰⠒⠀⣿⡁ 14:17 < icenowy[m]> I think now in Europe it should be winter? Let
⢿⡄⠘⠷⠚⠋⠀                     the BPi warm you ;-)
⠈⠳⣄⠀⠀⠀⠀ 14:17 <@KotCzarny> yeah, i have a pc to warm me ;)

Back to linux.debian.project | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Automatic downloading of non-free software by stuff in main Ian Jackson <ijackson@chiark.greenend.org.uk> - 2017-11-30 15:00 +0100
  Re: Automatic downloading of non-free software by stuff in main Ian Jackson <ijackson@chiark.greenend.org.uk> - 2017-12-01 15:00 +0100
    Re: Automatic downloading of non-free software by stuff in main Andrey Rahmatullin <wrar@debian.org> - 2017-12-01 16:30 +0100
      Re: Automatic downloading of non-free software by stuff in main Enrico Zini <enrico@enricozini.org> - 2017-12-01 16:40 +0100
        Re: Automatic downloading of non-free software by stuff in main Andrey Rahmatullin <wrar@debian.org> - 2017-12-01 17:20 +0100
          Re: Automatic downloading of non-free software by stuff in main Ian Jackson <ijackson@chiark.greenend.org.uk> - 2017-12-01 17:30 +0100
        Re: Automatic downloading of non-free software by stuff in main Ian Jackson <ijackson@chiark.greenend.org.uk> - 2017-12-01 17:20 +0100
      Re: Automatic downloading of non-free software by stuff in main "G. Branden Robinson" <g.branden.robinson@gmail.com> - 2017-12-01 19:10 +0100
    Re: Automatic downloading of non-free software by stuff in main Adam Borowski <kilobyte@angband.pl> - 2017-12-01 18:20 +0100
      Re: Automatic downloading of non-free software by stuff in main Ian Jackson <ijackson@chiark.greenend.org.uk> - 2017-12-01 18:30 +0100
      Re: Automatic downloading of non-free software by stuff in main "G. Branden Robinson" <g.branden.robinson@gmail.com> - 2017-12-01 19:10 +0100
        Re: Automatic downloading of non-free software by stuff in main Adam Borowski <kilobyte@angband.pl> - 2017-12-01 20:10 +0100
        Re: Automatic downloading of non-free software by stuff in main Tollef Fog Heen <tfheen@err.no> - 2017-12-03 12:10 +0100
  Re: Automatic downloading of non-free software by stuff in main "Dr. Bas Wijnen" <wijnen@debian.org> - 2017-12-03 09:00 +0100
  Re: Automatic downloading of non-free software by stuff in main Diane Trout <diane@ghic.org> - 2017-12-05 21:50 +0100
    Re: Automatic downloading of non-free software by stuff in main Andrey Rahmatullin <wrar@debian.org> - 2017-12-06 05:10 +0100
      Re: Automatic downloading of non-free software by stuff in main Ben Hutchings <ben@decadent.org.uk> - 2017-12-06 07:50 +0100
        Re: Automatic downloading of non-free software by stuff in main Henrique de Moraes Holschuh <hmh@debian.org> - 2017-12-07 00:40 +0100
          Re: Automatic downloading of non-free software by stuff in main Ben Hutchings <ben@decadent.org.uk> - 2017-12-07 01:10 +0100
            Re: Automatic downloading of non-free software by stuff in main Michael Stone <mstone@debian.org> - 2017-12-07 01:20 +0100
              Re: Automatic downloading of non-free software by stuff in main Ben Hutchings <ben@decadent.org.uk> - 2017-12-07 02:40 +0100
                Re: Automatic downloading of non-free software by stuff in main Adam Borowski <kilobyte@angband.pl> - 2017-12-07 03:30 +0100
                Re: Automatic downloading of non-free software by stuff in main Mike Hommey <mh@glandium.org> - 2017-12-07 04:20 +0100
                Re: Automatic downloading of non-free software by stuff in main Andrey Rahmatullin <wrar@debian.org> - 2017-12-07 07:10 +0100
                Re: Automatic downloading of non-free software by stuff in main Diane Trout <diane@ghic.org> - 2017-12-07 07:20 +0100
                Re: Automatic downloading of non-free software by stuff in main Andrey Rahmatullin <wrar@debian.org> - 2017-12-07 14:00 +0100
                Re: Automatic downloading of non-free software by stuff in main Holger Levsen <holger@layer-acht.org> - 2017-12-07 14:10 +0100
                Re: Automatic downloading of non-free software by stuff in main Paul Wise <pabs@debian.org> - 2017-12-07 14:20 +0100
                Re: Automatic downloading of non-free software by stuff in main "Paul R. Tagliamonte" <paultag@gmail.com> - 2017-12-07 14:40 +0100
                Re: Automatic downloading of non-free software by stuff in main Ian Jackson <ijackson@chiark.greenend.org.uk> - 2017-12-07 15:00 +0100
                Re: Automatic downloading of non-free software by stuff in main Holger Levsen <holger@layer-acht.org> - 2017-12-07 15:00 +0100
                Re: Automatic downloading of non-free software by stuff in main Lars Wirzenius <liw@liw.fi> - 2017-12-07 15:50 +0100
                Re: Automatic downloading of non-free software by stuff in main "Paul R. Tagliamonte" <paultag@gmail.com> - 2017-12-07 15:20 +0100
                Re: Automatic downloading of non-free software by stuff in main Ian Jackson <ijackson@chiark.greenend.org.uk> - 2017-12-07 17:10 +0100
                technical terms (Re: Automatic downloading of non-free software by  stuff in main) Holger Levsen <holger@layer-acht.org> - 2017-12-07 18:00 +0100
                technical terms (Re: Automatic downloading of non-free software by  stuff in main) Ian Jackson <ijackson@chiark.greenend.org.uk> - 2017-12-07 18:30 +0100
                Re: Automatic downloading of non-free software by stuff in main Jonas Smedegaard <dr@jones.dk> - 2017-12-07 18:30 +0100
                Re: Automatic downloading of non-free software by stuff in main "Paul R. Tagliamonte" <paultag@gmail.com> - 2017-12-07 18:40 +0100
                Re: Automatic downloading of non-free software by stuff in main Diane Trout <diane@ghic.org> - 2017-12-07 19:40 +0100
                Re: Automatic downloading of non-free software by stuff in main Adam Borowski <kilobyte@angband.pl> - 2017-12-07 22:10 +0100
                Re: Automatic downloading of non-free software by stuff in main Diane Trout <diane@ghic.org> - 2017-12-07 23:00 +0100
                Re: Automatic downloading of non-free software by stuff in main "Paul R. Tagliamonte" <paultag@gmail.com> - 2017-12-07 23:10 +0100
                Re: Automatic downloading of non-free software by stuff in main gregor herrmann <gregoa@debian.org> - 2017-12-07 19:30 +0100
                Re: Automatic downloading of non-free software by stuff in main Diane Trout <diane@ghic.org> - 2017-12-07 20:10 +0100
                Re: Automatic downloading of non-free software by stuff in main Andrey Rahmatullin <wrar@debian.org> - 2017-12-07 20:30 +0100
                Re: Automatic downloading of non-free software by stuff in main Diane Trout <diane@ghic.org> - 2017-12-07 21:10 +0100
                Re: Automatic downloading of non-free software by stuff in main Holger Levsen <holger@layer-acht.org> - 2017-12-07 14:00 +0100
    Automatically marking downloaded files (was Re: Automatic downloading  of non-free software by stuff in main) Anthony DeRobertis <anthony@derobert.net> - 2017-12-06 06:30 +0100
      Re: Automatically marking downloaded files (was Re: Automatic downloading of non-free software by stuff in main) Stuart Prescott <stuart@debian.org> - 2017-12-07 02:40 +0100
        Re: Automatically marking downloaded files (was Re: Automatic downloading of non-free software by stuff in main) Ian Jackson <ijackson@chiark.greenend.org.uk> - 2017-12-07 15:00 +0100

csiph-web