From owner-cvs-all  Sat Sep  2 13:31:30 2000
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id 9031B37B423; Sat,  2 Sep 2000 13:31:26 -0700 (PDT)
Received: (from rwatson@localhost)
	by freefall.freebsd.org (8.9.3/8.9.2) id NAA71259;
	Sat, 2 Sep 2000 13:31:26 -0700 (PDT)
	(envelope-from rwatson@FreeBSD.org)
Message-Id: <200009022031.NAA71259@freefall.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Sat, 2 Sep 2000 13:31:26 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/ufs/ufs extattr.h ufs_extattr.c
         src/usr.sbin/extattrctl extattrctl.8 extattrctl.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

rwatson     2000/09/02 13:31:26 PDT

  Modified files:
    sys/ufs/ufs          extattr.h ufs_extattr.c 
    usr.sbin/extattrctl  extattrctl.8 extattrctl.c 
  Log:
  Modify extended attribute protection model to authorize based on
  attribute namespace and DAC protection on file:
  	- Attribute names beginning with '$' are in the system namespace
  	- The attribute name "$" is reserved
  	- System namespace attributes may only be read/set by suser()
  	  or by kernel (cred == NULL)
  	- Other attribute names are in the application namespace
  	- The attribute name "" is reserved
  	- Application namespace attributes are protected in the manner
  	  of the target file permission
  
  o Kernel changes
  	- Add ufs_extattr_valid_attrname() to check whether the requested
  	  attribute "set" or "enable" is appropriate (i.e., non-reserved)
  	- Modify ufs_extattr_credcheck() to accept target file vnode, not
  	  to take inode uid
  	- Modify ufs_extattr_credcheck() to check namespace, then enforce
  	  either kernel/suser for system namespace, or vaccess() for
  	  application namespace
  o EA backing file format changes
  	- Remove permission fields from extended attribute backing file
  	  header
  	- Bump extended attribute backing file header version to 3
  o Update extattrctl.c and extattrctl.8
  	- Remove now deprecated -r and -w arguments to initattr, as
  	  permissions are now implicit
  	- (unrelated) fix error reporting and unlinking during failed
  	  initattr to remove duplicate/inaccurate error messages, and to
  	  only unlink if the failure wasn't in the backing file open()
  
  Obtained from:	TrustedBSD Project
  
  Revision  Changes    Path
  1.8       +2 -4      src/sys/ufs/ufs/extattr.h
  1.9       +60 -41    src/sys/ufs/ufs/ufs_extattr.c
  1.7       +4 -28     src/usr.sbin/extattrctl/extattrctl.8
  1.6       +16 -50    src/usr.sbin/extattrctl/extattrctl.c



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message