From nobody Fri Nov 12 21:33:23 2021 X-Original-To: current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id D7A481848DC2 for ; Fri, 12 Nov 2021 21:33:24 +0000 (UTC) (envelope-from grarpamp@gmail.com) Received: from mail-ua1-x931.google.com (mail-ua1-x931.google.com [IPv6:2607:f8b0:4864:20::931]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1D4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HrWzS5dzkz4v6P for ; Fri, 12 Nov 2021 21:33:24 +0000 (UTC) (envelope-from grarpamp@gmail.com) Received: by mail-ua1-x931.google.com with SMTP id n6so5084126uak.1 for ; Fri, 12 Nov 2021 13:33:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=lVvNouad/twHkhKdXVMRle9kJPVVM93m5CktuVmoGlY=; b=F5GJ0f1Ngc8V39myN831QHqhyDusV8rb/w9K7yikoL3qjEcJreDrYFdp1OMiR5FnVf UmXePkLvNHwkjRcz1PqJtqyMw6PZLOLTOqxNPu7pwhewy0E7G96wkuVKj5vRvWS6OzmF nPk/g/AUS7j6VRgp/Yz4dM8KVVzEEPICYGzfpgqugHm5bUn0bVxEbnbcy5KqcH59vCA/ 1PRmrYPOXHz3pkW9ZhUF6uLmEd9uGw9i8bAzrVrdXBjcXP1j3kFV4oDzwBRH7GrwfyFp kcS58AdcWqzhbxeaHtzaweKo/gLlQww7YRv0L85MVbQelCbIFd+Q0XBFilRAYWxdk3sj R9QQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=lVvNouad/twHkhKdXVMRle9kJPVVM93m5CktuVmoGlY=; b=XDWs/wEAwvODGONjWwCkTj9HzhJgCD+RLCy+Bq5JgxzW6TH6asAThDQbNwxsASH3KJ c4e5Dt1rJl2AUcz834JF7nGoesl4CAF0LctnqYhjnwu4kHQzVsTZsiY3XUdBg/nZfQzf i2SyLVCabFF9OkLDHXOz2pLJJqeQ0kEB1OYO6sgLNOtf8/N+hOnSCXg2Hp+QKRo/36+S i86m8/wuom6WBTrBB10lWyPZayWsFhUWIK/pS9Vp98NNIW2wM+021QHJHJvRERzGWvvL VwykIg+v4QVDLuKR3FiSTnYDC7AgOBLcWAQDD7kHaP/pi1fxtD8Mc4bnyKsC85WxvkAw hrHA== X-Gm-Message-State: AOAM531ZRmZPvXs1YyqzHj2NO9EoDkNBqK00b07tm9uh54NAlfYzuPkK 0SKxdNs/Z8c6lmFo+7JknUW3sFmO5REK72MCPLR563ygnAOt30pv X-Google-Smtp-Source: ABdhPJxM2fqht4Jxr+Cntc9XvMBwuFCXO31cjMWrZkiwr5atspSRqEMTGss84kPHgn5uxk4eo26OMzuMqI6Qnl+MzLE= X-Received: by 2002:a67:cb92:: with SMTP id h18mr14321716vsl.7.1636752804238; Fri, 12 Nov 2021 13:33:24 -0800 (PST) List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@freebsd.org MIME-Version: 1.0 Received: by 2002:a59:9946:0:b0:248:630f:3460 with HTTP; Fri, 12 Nov 2021 13:33:23 -0800 (PST) In-Reply-To: <87fss1rxfl.wl-herbert@gojira.at> References: <87fss1rxfl.wl-herbert@gojira.at> From: grarpamp Date: Fri, 12 Nov 2021 16:33:23 -0500 Message-ID: Subject: Re: Extracting base.txz files missing flags To: current@freebsd.org Cc: herbert@gojira.at Content-Type: text/plain; charset="UTF-8" X-Rspamd-Queue-Id: 4HrWzS5dzkz4v6P X-Spamd-Bar: ---- Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[] X-ThisMailContainsUnwantedMimeParts: N Flags are not security since root will bypass everything. While some may beg for anti-footshooting, but where might that cry end up... chflags -Rhx schg / . Nor should freebsd fill that role when local admins know best for and given their own individual environments. If local tendency is to run around as root and disrupt your filesystems so bad that even these... > ./libexec/ld-elf.so.1 > ./libexec/ld-elf32.so.1 ... get routinely wrecked, then you have bigger local problems to work on than freebsd can help you with :) nb: /var/empty is an ssh make install-time thing, that mtree might have picked up, but sshd itself doesn't check or require schg [theatre] there. tar should probably get an extended verbose mode format that lists all metadata that is extractable to disk, such as flags.