tree 7e7ebc68a77ec27ed99c1ccc20af9e910b6c92cd
parent 3291bb532df5181352acfb492fc18b7110172670
author Miklos Szeredi <mszeredi@redhat.com> 1496063727 +0200
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1523641692 +0200

ovl: filter trusted xattr for non-admin


[ Upstream commit a082c6f680da298cf075886ff032f32ccb7c5e1a ]

Filesystems filter out extended attributes in the "trusted." domain for
unprivlieged callers.

Overlay calls underlying filesystem's method with elevated privs, so need
to do the filtering in overlayfs too.

Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>