libarchive and MAC labels

Robert Watson rwatson at FreeBSD.org
Tue Jun 18 12:41:16 UTC 2013


On Wed, 12 Jun 2013, Dewayne Geraghty wrote:

>> I've created a patch for libarchive that allows storing and restoring MAC 
>> labels from/to a multilabel filesystem using bsdtar. Now before going 
>> anywhere with this I had a few questions:

...

> Thank-you for addressing a significant backup/recovery shortcoming.
>
> I've used biba extensively, however if files/directories are backed-up with 
> MLS+biba and recovered in a biba only environment, that is the sysadmin 
> choice.  Warning messages are fine, but the restoration should continue (if 
> possible).

I'd also like to see this go back into libarchive; I suspect many people would 
find this useful.

Robert


More information about the freebsd-security mailing list