Can a UBIFS be set as ACL?












1















Running Debian Buster on Kernel 4.20.17 with systemd 241:



+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN2 +IDN -PCRE2 default-hierarchy=hybrid


I have two ubifs volumes on a nand (/dev/mtd3) partition:



ubi0:rootfs on / type ubifs (ro,relatime,assert=read-only,ubi=0,vol=1)
/dev/ubi0_2 on /var type ubifs (rw,relatime,assert=read-only,ubi=0,vol=2)


and I get the following error:



systemd-journald[747]: Failed to set ACL on /var/log/journal/2f572c0abab24e2fafc1b969aba78f1f/user-1000.journal, ignoring: Operation not supported


Can I set UBIFS as ACL and if so how do I tweak my fstab to enable it?



/dev/ubi0_2 /var ubifs defaults,auto 0 0









share|improve this question



























    1















    Running Debian Buster on Kernel 4.20.17 with systemd 241:



    +PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN2 +IDN -PCRE2 default-hierarchy=hybrid


    I have two ubifs volumes on a nand (/dev/mtd3) partition:



    ubi0:rootfs on / type ubifs (ro,relatime,assert=read-only,ubi=0,vol=1)
    /dev/ubi0_2 on /var type ubifs (rw,relatime,assert=read-only,ubi=0,vol=2)


    and I get the following error:



    systemd-journald[747]: Failed to set ACL on /var/log/journal/2f572c0abab24e2fafc1b969aba78f1f/user-1000.journal, ignoring: Operation not supported


    Can I set UBIFS as ACL and if so how do I tweak my fstab to enable it?



    /dev/ubi0_2 /var ubifs defaults,auto 0 0









    share|improve this question

























      1












      1








      1








      Running Debian Buster on Kernel 4.20.17 with systemd 241:



      +PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN2 +IDN -PCRE2 default-hierarchy=hybrid


      I have two ubifs volumes on a nand (/dev/mtd3) partition:



      ubi0:rootfs on / type ubifs (ro,relatime,assert=read-only,ubi=0,vol=1)
      /dev/ubi0_2 on /var type ubifs (rw,relatime,assert=read-only,ubi=0,vol=2)


      and I get the following error:



      systemd-journald[747]: Failed to set ACL on /var/log/journal/2f572c0abab24e2fafc1b969aba78f1f/user-1000.journal, ignoring: Operation not supported


      Can I set UBIFS as ACL and if so how do I tweak my fstab to enable it?



      /dev/ubi0_2 /var ubifs defaults,auto 0 0









      share|improve this question














      Running Debian Buster on Kernel 4.20.17 with systemd 241:



      +PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN2 +IDN -PCRE2 default-hierarchy=hybrid


      I have two ubifs volumes on a nand (/dev/mtd3) partition:



      ubi0:rootfs on / type ubifs (ro,relatime,assert=read-only,ubi=0,vol=1)
      /dev/ubi0_2 on /var type ubifs (rw,relatime,assert=read-only,ubi=0,vol=2)


      and I get the following error:



      systemd-journald[747]: Failed to set ACL on /var/log/journal/2f572c0abab24e2fafc1b969aba78f1f/user-1000.journal, ignoring: Operation not supported


      Can I set UBIFS as ACL and if so how do I tweak my fstab to enable it?



      /dev/ubi0_2 /var ubifs defaults,auto 0 0






      acl systemd-journald ubifs






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked 3 hours ago









      cajjedcajjed

      388




      388






















          1 Answer
          1






          active

          oldest

          votes


















          0














          No, according to the UBIFS documentation, ACL support is not implemented in UBIFS:




          Extended attributes



          UBIFS supports extended attributes if the corresponding configuration
          option is enabled (no additional mount options are required). It
          supports the user, trusted, and security name-spaces. However, access
          control lists (ACL) support is not implemented.



          Note, currently mkfs.ubifs ignores extended attributes and does not
          write them to the target file-system image.




          Likewise, the kernel source states that ACL support is not implemented.



          Filesystems implementing ACL usually have an acl.c file in sources. JFFS2 has such a file and supports ACLs (eg: its mkfs.jffs2 command has a --with-posix-acl option).



          If the ACL feature is really needed, and your system can afford it (eg: JFFS2 might use more RAM and have a longer mount time if big) maybe a small separate JFFS2 filesystem where this feature is needed could be considered. Using JFFS2 over UBI (to improve wear levelling) appears to be fine and has been studied when comparing various solutions, so this could perhaps be a workaround.



          refs:





          • ubi.ppt (PPT)


          • A Comparative Analaysis Between Embedded Linux File Systems (PDF)

          • Linux: JFFS2 images over UBI layer






          share|improve this answer

























            Your Answer








            StackExchange.ready(function() {
            var channelOptions = {
            tags: "".split(" "),
            id: "106"
            };
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function() {
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled) {
            StackExchange.using("snippets", function() {
            createEditor();
            });
            }
            else {
            createEditor();
            }
            });

            function createEditor() {
            StackExchange.prepareEditor({
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: false,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: null,
            bindNavPrevention: true,
            postfix: "",
            imageUploader: {
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            },
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            });


            }
            });














            draft saved

            draft discarded


















            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f507293%2fcan-a-ubifs-be-set-as-acl%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            0














            No, according to the UBIFS documentation, ACL support is not implemented in UBIFS:




            Extended attributes



            UBIFS supports extended attributes if the corresponding configuration
            option is enabled (no additional mount options are required). It
            supports the user, trusted, and security name-spaces. However, access
            control lists (ACL) support is not implemented.



            Note, currently mkfs.ubifs ignores extended attributes and does not
            write them to the target file-system image.




            Likewise, the kernel source states that ACL support is not implemented.



            Filesystems implementing ACL usually have an acl.c file in sources. JFFS2 has such a file and supports ACLs (eg: its mkfs.jffs2 command has a --with-posix-acl option).



            If the ACL feature is really needed, and your system can afford it (eg: JFFS2 might use more RAM and have a longer mount time if big) maybe a small separate JFFS2 filesystem where this feature is needed could be considered. Using JFFS2 over UBI (to improve wear levelling) appears to be fine and has been studied when comparing various solutions, so this could perhaps be a workaround.



            refs:





            • ubi.ppt (PPT)


            • A Comparative Analaysis Between Embedded Linux File Systems (PDF)

            • Linux: JFFS2 images over UBI layer






            share|improve this answer






























              0














              No, according to the UBIFS documentation, ACL support is not implemented in UBIFS:




              Extended attributes



              UBIFS supports extended attributes if the corresponding configuration
              option is enabled (no additional mount options are required). It
              supports the user, trusted, and security name-spaces. However, access
              control lists (ACL) support is not implemented.



              Note, currently mkfs.ubifs ignores extended attributes and does not
              write them to the target file-system image.




              Likewise, the kernel source states that ACL support is not implemented.



              Filesystems implementing ACL usually have an acl.c file in sources. JFFS2 has such a file and supports ACLs (eg: its mkfs.jffs2 command has a --with-posix-acl option).



              If the ACL feature is really needed, and your system can afford it (eg: JFFS2 might use more RAM and have a longer mount time if big) maybe a small separate JFFS2 filesystem where this feature is needed could be considered. Using JFFS2 over UBI (to improve wear levelling) appears to be fine and has been studied when comparing various solutions, so this could perhaps be a workaround.



              refs:





              • ubi.ppt (PPT)


              • A Comparative Analaysis Between Embedded Linux File Systems (PDF)

              • Linux: JFFS2 images over UBI layer






              share|improve this answer




























                0












                0








                0







                No, according to the UBIFS documentation, ACL support is not implemented in UBIFS:




                Extended attributes



                UBIFS supports extended attributes if the corresponding configuration
                option is enabled (no additional mount options are required). It
                supports the user, trusted, and security name-spaces. However, access
                control lists (ACL) support is not implemented.



                Note, currently mkfs.ubifs ignores extended attributes and does not
                write them to the target file-system image.




                Likewise, the kernel source states that ACL support is not implemented.



                Filesystems implementing ACL usually have an acl.c file in sources. JFFS2 has such a file and supports ACLs (eg: its mkfs.jffs2 command has a --with-posix-acl option).



                If the ACL feature is really needed, and your system can afford it (eg: JFFS2 might use more RAM and have a longer mount time if big) maybe a small separate JFFS2 filesystem where this feature is needed could be considered. Using JFFS2 over UBI (to improve wear levelling) appears to be fine and has been studied when comparing various solutions, so this could perhaps be a workaround.



                refs:





                • ubi.ppt (PPT)


                • A Comparative Analaysis Between Embedded Linux File Systems (PDF)

                • Linux: JFFS2 images over UBI layer






                share|improve this answer















                No, according to the UBIFS documentation, ACL support is not implemented in UBIFS:




                Extended attributes



                UBIFS supports extended attributes if the corresponding configuration
                option is enabled (no additional mount options are required). It
                supports the user, trusted, and security name-spaces. However, access
                control lists (ACL) support is not implemented.



                Note, currently mkfs.ubifs ignores extended attributes and does not
                write them to the target file-system image.




                Likewise, the kernel source states that ACL support is not implemented.



                Filesystems implementing ACL usually have an acl.c file in sources. JFFS2 has such a file and supports ACLs (eg: its mkfs.jffs2 command has a --with-posix-acl option).



                If the ACL feature is really needed, and your system can afford it (eg: JFFS2 might use more RAM and have a longer mount time if big) maybe a small separate JFFS2 filesystem where this feature is needed could be considered. Using JFFS2 over UBI (to improve wear levelling) appears to be fine and has been studied when comparing various solutions, so this could perhaps be a workaround.



                refs:





                • ubi.ppt (PPT)


                • A Comparative Analaysis Between Embedded Linux File Systems (PDF)

                • Linux: JFFS2 images over UBI layer







                share|improve this answer














                share|improve this answer



                share|improve this answer








                edited 23 mins ago

























                answered 1 hour ago









                A.BA.B

                5,2871829




                5,2871829






























                    draft saved

                    draft discarded




















































                    Thanks for contributing an answer to Unix & Linux Stack Exchange!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid



                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.


                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function () {
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f507293%2fcan-a-ubifs-be-set-as-acl%23new-answer', 'question_page');
                    }
                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    Entries order in /etc/network/interfaces

                    新発田市

                    Grub takes very long (several minutes) to open Menu (in Multi-Boot-System)