Skip to content
  • Dr. David Alan Gilbert's avatar
    tools/virtiofsd: xattr name mappings: Add option · 6084633d
    Dr. David Alan Gilbert authored
    
    
    Add an option to define mappings of xattr names so that
    the client and server filesystems see different views.
    This can be used to have different SELinux mappings as
    seen by the guest, to run the virtiofsd with less privileges
    (e.g. in a case where it can't set trusted/system/security
    xattrs but you want the guest to be able to), or to isolate
    multiple users of the same name; e.g. trusted attributes
    used by stacking overlayfs.
    
    A mapping engine is used with 3 simple rules; the rules can
    be combined to allow most useful mapping scenarios.
    The ruleset is defined by -o xattrmap='rules...'.
    
    This patch doesn't use the rule maps yet.
    
    Signed-off-by: default avatarDr. David Alan Gilbert <dgilbert@redhat.com>
    Message-Id: <20201023165812.36028-2-dgilbert@redhat.com>
    Reviewed-by: Stefan Hajnoczi's avatarStefan Hajnoczi <stefanha@redhat.com>
    Signed-off-by: default avatarDr. David Alan Gilbert <dgilbert@redhat.com>
    6084633d