User Tools

Site Tools


blueprints:extended_attributes

Extended Attrbutes

This project is to store Linux extended attributes. This is particularly important for SELinux support.

Security Enhanced Linux (SELinux) enabled systems make extensive use of extended attributes. In addition to the standard user, group, and permission, each file has an associated SELinux context stored as an extended attribute. This context is used to define which operations a given program is permitted to perform on that file. Storing contexts on an SELinux system is as critical as storing ownership and permissions. In the case of a full system restore, the system will not even be able to boot until all critical system files have been properly relabeled.

Fedora ships with a version of tar that has been patched to handle extended attributes. The patch has not been integrated upstream yet, so could serve as a good starting point.

blueprints/extended_attributes.txt · Last modified: 2008/08/06 17:32 by fs