On Thu, 15 Oct 2015 18:56:28 +0800 Jason Zaman <perfin...@gentoo.org> wrote:
> On Thu, Oct 15, 2015 at 10:57:45AM +0200, Tobias Klausmann wrote: > > Hi! > > > > On Wed, 14 Oct 2015, Mike Frysinger wrote: > > > anyone opposed to flipping this flag on by default ? > > > > > > reference: > > > https://bugs.gentoo.org/506198 > > > https://bugs.gentoo.org/556408 > > > > No objection, but a bit of a datapoint. I use btrfs on one of my > > machines, and that filesystem (apparently) does not support > > XATTR_PAX markings. So on every update I get some packages with > > message like these: > > I used to run hardened on btrfs and it worked fine. pax xattrs are in > the user namespace (user.pax.flags) which isnt protected (unlike eg. > security.*). I dont remember doing anything special to enable xattrs > on btrfs, most of the newer FSs have them enabled by default. > > Can you try this: > > # getfattr -d -m- /bin/ping I think he should check xattr support in PORTAGE_TMPDIR in the first place. :) I suspect something like tmpfs mounted on it (and CONFIG_TMPFS_XATTR=n in the kernel config). -- Alexander Tsoy