[OpenWrt-Devel] Enable security labels on ext4?

[W. Michael Petullo]

Capabilities are an important security mechanism on Linux because they
allow programs to run with fewer privileges. I would like to propose that
we enable security labels by default on filesystems like ext4. This is
done by selecting the following kernel build option:

	File systems -> (The Extended 4 (ext4) filesystem) Ext4 Security
	Labels

I have already submitted a pull request which should allow
our build servers to provide the corresponding libcap utilities. See:

	https://github.com/openwrt/packages/pull/7368

-- 
Mike

:wq

_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel