As of now we have a knob "-o xattr/no_xattr" which either enables all xattrs or disables all xattrs.
We need something more fine grained where we can selectively disable only certain xattrs (and not all). For example, in some cases we want to disable "security.selinux" xattr. This is equivalent to virtiofs not supporting security.selinux and guest kernel will fallback to a single label for whole fs (virtiofs_t). So add an option "-o block_xattr=<list-of-xattrs>" which will allow specifying a list of xattrs to block. Vivek Goyal (2): virtiofsd: Add an array to keep track of blocked xattrs virtiofsd: Add option "block_xattr=" to block certain xattrs docs/tools/virtiofsd.rst | 17 ++++ tools/virtiofsd/helper.c | 3 + tools/virtiofsd/passthrough_ll.c | 166 ++++++++++++++++++++++++++++--- 3 files changed, 171 insertions(+), 15 deletions(-) -- 2.31.1