On Thu, Mar 29, 2018 at 09:00:59AM -1000, Joel Roth wrote:
> I've been backing up my system with rsync years without
> the --xattrs option. I'm curious if important parts of 
> Debian/Devuan rely on extended attributes.

Type: 「getcap -r /bin /sbin /usr /lib」.  If anything pops up, you'd lose the
functionality of that program after a restore.  Note that these caps are set
in postinst conditionally, requiring capability support in the kernel and
filesystem, plus userspace tool (libcap2-bin).  This is installed by
default, but if you started with a minimal install, you won't have it.  In
such cases, the fallback is to set the relevant programs setuid root, which
is far less secure.

The other good use I know of is selinux, which I have never played with.

Then there's Chromium and wget's tracking.

There are also ACLs but I haven't used those either.


Thus: capabilities, selinux labels, ACLs, user namespace; that's all I'm
aware of.


Meow!
-- 
⢀⣴⠾⠻⢶⣦⠀ When I visited the US a couple decades ago, Hillary molested and
⣾⠁⢰⠒⠀⣿⡁ groped me.  You don't believe?  Well, the burden of proof is on you!
⢿⡄⠘⠷⠚⠋⠀ Flooding a douche with obviously false accusations makes your other
⠈⠳⣄⠀⠀⠀⠀ words dubious even when they happen to be true.
_______________________________________________
Dng mailing list
[email protected]
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Reply via email to