[Bug 277908] zfs: cannot lookup extended attributes in capability mode

From: <bugzilla-noreply_at_freebsd.org>
Date: Sun, 24 Mar 2024 13:35:52 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=277908

--- Comment #5 from Alan Somers <asomers@FreeBSD.org> ---
(In reply to Shawn Webb from comment #4)
I tried doing a Capsicum check here.  But it's hard, because at this point
there isn't a file descriptor anymore, just a vnode pointer.  And a
capabilities check would be redundant anyway.  Capabilities are already checked
further up the stack in kern_extattr_get_path and kern_extattr_get_fd.

-- 
You are receiving this mail because:
You are the assignee for the bug.