Re: [gentoo-hardened] xattr/acl/cap

2012-05-21 Thread Anthony G. Basile
On 05/20/2012 08:06 PM, Maxim Kammerer wrote: On Mon, May 21, 2012 at 1:46 AM, Anthony G. Basile wrote: Okay this is where I have to redirect you because I'm not aware of this particular issue, ie why consolekit needs tmpfs posix acls. If I am not mistaken, ConsoleKit uses ACLs to grant the

Re: [gentoo-hardened] xattr/acl/cap

2012-05-20 Thread Maxim Kammerer
On Mon, May 21, 2012 at 1:46 AM, Anthony G. Basile wrote: > Okay this is where I have to redirect you because I'm not aware of this > particular issue, ie why consolekit needs tmpfs posix acls. If I am not mistaken, ConsoleKit uses ACLs to grant the currently active user access to various /dev no

Re: [gentoo-hardened] xattr/acl/cap

2012-05-20 Thread Anthony G. Basile
On 05/20/2012 05:35 PM, Alex Efros wrote: Hi! I'm not sure is this right place to ask… Oh no! You committed a grave sin asking here ... j/k :) You can always ask and if we don't know then we'll redirect. What is current status for filesystem's xattr, acl and caps? Working on it but pr

Re: [gentoo-hardened] xattr/acl/cap

2012-05-20 Thread Michael Orlitzky
On 05/20/2012 05:35 PM, Alex Efros wrote: > Hi! > > ACL > Not sure about consolekit requirement above, but otherwise it looks > useless (if you don't need to use complicated file permissions). ACLs are actually very nice if you can get over the initial hurdle of figuring out how they work

[gentoo-hardened] xattr/acl/cap

2012-05-20 Thread Alex Efros
Hi! I'm not sure is this right place to ask… What is current status for filesystem's xattr, acl and caps? I'm usually keep all of this disabled in kernel, because I don't use them and wanna avoid needless complexity. But today consolekit (which I don't use, but which is installed anyway as someo