Ignore security.capability xattr

cyverse · Dec 15, 2023 · b7c1659 · b7c1659
1 parent d8a6a47
commit b7c1659
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/irodsfs/dir.go b/irodsfs/dir.go
@@ -311,7 +311,7 @@ func (dir *Dir) Setxattr(ctx context.Context, attr string, data []byte, flags ui
 	defer logger.Infof("Called Setxattr (%d) - %q", operID, dir.path)
 
 	if IsUnhandledAttr(attr) {
-		return syscall.EINVAL
+		return syscall.EACCES
 	}
 
 	dir.mutex.RLock()

diff --git a/irodsfs/xattr.go b/irodsfs/xattr.go
@@ -17,7 +17,7 @@ func IsUnhandledAttr(attr string) bool {
 	// we suppress attr "system.posix_acl_access" as it may cause wrong permission check
 	case "system.posix_acl_access", "system.posix_acl_default", "system.dos_attrib":
 		return true
-	case "security.selinux", "security.apparmor":
+	case "security.selinux", "security.apparmor", "security.capability":
 		return true
 	case "user.xdg.origin.url", "user.xdg.referrer.url":
 		return true