Did all these tests, did some fixes, "#Linuxulator userland from source" branch builds fine on #FreeBSD 14-CURRENT/13.2-RELEASE, aarch64/amd64/i386 🥳

Now doing test builds with 15-CURRENT, which already has a fix for the #Linux #xattr issue. Unfortunately, it's still incomplete. Neverending story 😞

JFTR, not blaming dchagin at all. It seems Linux has some very weird design decisions, and semantics of the xattr syscall return codes -- EPERM is considered fatal by GNU/Linux tools, because Linux returns ENOATTR or ENOTSUP when access to e.g. the system namespace is restricted 🤯

Dateien mit Attributen

Wer Dateien mit eigenen Attributen versehen möchte, kann dafür die Extended File Attributes verwenden.

#Datei #Dateien #Attribute #xattr #Tagging #Tags #Linux

https://gnulinux.ch/dateien-mit-attributen

#osquery defense kit v1.6.0 just dropped with some new #blueteam queries:

- unencrypted #GCP service account keys
- unexpected #sysctl calls
- unexpected #xattr calls
- unexpected file made #executable
- unexpected Security.Framework program

If nothing else, I hope the queries are useful ideas for others! Have a great weekend. 🌴