On Wednesday, 9 January 2019 12:14:47 PM AEDT Tim Connors via luv-main wrote:
> On Wed, 9 Jan 2019, Glenn McIntosh wrote:
> > On 8/1/19 11:44 pm, Russell Coker via luv-main wrote:
> > > Below is an example.  Is there a good way of preserving capabilities
> > > apart
> > > from running "getcap /bin/* /sbin/* /usr/bin/* /usr/sbin/*" and storing
> > > the
> > > output?
> > 
> > Since the capabilities are stored using extended attributes, then using
> > the '-X' flag on rsync should do the trick. You may need to be root user
> > to be able to create these on the destination (or alternatively use
> > fake-super on rsync).
> 
> rsync flags I frequently see people forget to use on rsync when they want
> the destination to be exactly the same as the source:
> 
> rsync -HAXS

Thanks Tim and Glenn.  Not surprising that rsync could do what I wanted but I 
just didn't know where to look.

getfattr from the attr package on debian can give a list of xattrs that are in 
use.

# getfattr -m - /bin/ping
getfattr: Removing leading '/' from absolute path names
# file: bin/ping
security.capability
security.selinux

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/

_______________________________________________
luv-main mailing list
[email protected]
https://lists.luv.asn.au/cgi-bin/mailman/listinfo/luv-main

Reply via email to