It maybe empty in which case a 'client' rule +**key** is a string tested as a prefix on an attribute name originating + denied using EPERM when the server passes an attribute +- 'bad' - If a client tries to use this name it's +- 'ok' - The attribute name is OK and passed through to

+ For a server case, the prepend is tested and stripped + is added before the name is passed to the server.

+- 'prefix' - If 'key' matches the client then the 'prepend' +- 'all' - can be used to match both cases. +- 'server' - match 'prepend' against a xattr name from the server +- 'client' - match 'key' against a xattr name from the client for +Using ':' as the separator a rule is of the form: +White space may be added before and after each rule. +first non-white space character in the rule. +Each rule consists of a number of fields separated with a separator that is the +The first matching rule terminates the mapping. +A mapping of xattr names can be made using -o xattrmap=mapping where the ``mapping`` +virtiofsd is running in a container with restricted priviliges where it cannot selinux client/server confusion) or if the This can be a problem where either those xattr names are used +By default the name of xattr's used by the client are passed through to the server ``always`` sets a long cache lifetime at the expense of coherency. ``auto`` acts similar to NFS with a 1 second metadata cache This patch doesn't use the rule maps yet.ĭocs/tools/virtiofsd.rst | 55 ++++++++++++

The ruleset is defined by -o xattrmap='rules.'. trusted attributesĪ mapping engine is used wit 3 simple rules the rules canīe combined to allow most useful mapping scenarios. Xattrs but you want the guest to be able to), or to isolate in a case where it can't set trusted/system/security Seen by the guest, to run the virtiofsd with less privileges This can be used to have different SELinux mappings as The client and server filesystems see different views. To: tools/virtiofsd: xattr name mappings: Add optionĭate: Thu, 16:36:54 +0100 Īdd an option to define mappings of xattr names so that David Alan Gilbert (git) archive mirror help / color / mirror / Atom feed From: 'Dr. Tools/virtiofsd: xattr name mappings: Add option - Dr.

Git rhel