diff options
| author | Peter Maydell | 2021-03-04 11:42:46 +0100 |
|---|---|---|
| committer | Peter Maydell | 2021-03-04 11:42:46 +0100 |
| commit | cb90ecf9349198558569f6c86c4c27d215406095 (patch) | |
| tree | 634df5a450305c9646de14a0fe22fc6b2760806a /docs | |
| parent | Merge remote-tracking branch 'remotes/mst/tags/for_upstream' into staging (diff) | |
| parent | virtiofs: drop remapped security.capability xattr as needed (diff) | |
| download | qemu-cb90ecf9349198558569f6c86c4c27d215406095.tar.gz qemu-cb90ecf9349198558569f6c86c4c27d215406095.tar.xz qemu-cb90ecf9349198558569f6c86c4c27d215406095.zip | |
Merge remote-tracking branch 'remotes/dgilbert-gitlab/tags/pull-virtiofs-20210304' into staging
virtiofs minor security fix
Fix xattrmap to drop remapped security.capability capabilities.
Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
# gpg: Signature made Thu 04 Mar 2021 10:36:45 GMT
# gpg: using RSA key 45F5C71B4A0CB7FB977A9FA90516331EBC5BFDE7
# gpg: Good signature from "Dr. David Alan Gilbert (RH2) <dgilbert@redhat.com>" [full]
# Primary key fingerprint: 45F5 C71B 4A0C B7FB 977A 9FA9 0516 331E BC5B FDE7
* remotes/dgilbert-gitlab/tags/pull-virtiofs-20210304:
virtiofs: drop remapped security.capability xattr as needed
Signed-off-by: Peter Maydell <peter.maydell@linaro.org>
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/tools/virtiofsd.rst | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/docs/tools/virtiofsd.rst b/docs/tools/virtiofsd.rst index 866b7db3ee..00554c75bd 100644 --- a/docs/tools/virtiofsd.rst +++ b/docs/tools/virtiofsd.rst @@ -228,6 +228,10 @@ The 'map' type adds a number of separate rules to add **prepend** as a prefix to the matched **key** (or all attributes if **key** is empty). There may be at most one 'map' rule and it must be the last rule in the set. +Note: When the 'security.capability' xattr is remapped, the daemon has to do +extra work to remove it during many operations, which the host kernel normally +does itself. + xattr-mapping Examples ---------------------- |