Peter Tribble wrote:
On Tue, 2006-05-02 at 14:31, Darren J Moffat wrote:
IMO runat(1) should never have been shipped it presents a "strange" view
of the world and an illusion that something outside of the creating
application can and should be able to manipulate the xattrs (which IMO
is not necessarily a desireable thing).
So what's to stop any other xattr aware application from
getting at the xattrs?
Nothing which is why as currently implemented they aren't suitable for
storing security sensitive information. Such as things that would need
to be protected by a privilege to allow change: force privileges, or MAC
label, or imutable flag etc etc.
I trialled xattrs on a couple of little projects, just for
storing metadata about files, and found runat very useful
for development and debugging. I think it should be kept.
Right but thats what it is a development and debug tool not a tool for
building other applications on top of.
(The trials didn't get very far, mainly due to lack of
support in java and perl.)
If that were to happen would you do more with xattrs ? Particuarly
given how they are supported properly in NFSv4 ?
--
Darren J Moffat
_______________________________________________
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org