Re: extended attributes security problem

[Andi Kleen <ak@suse.de>]

On Fri, Apr 05, 2002 at 11:41:03PM -0900, Ethan Benson wrote:
> 
> Hi,
> 
> I have found an annoying problem with extended attributes in regards
> to security.  

Have you actually tested this? The EA limit is 64K per inode and there 
is an inode space limit on the XFS fs too (normally 25% of the disk space).
So you can never actually allocate more than 25% of disk space this way
or even less if you use a different mkfs option. If you set the maximum
inode space to 5% and always keep >5% free you should be pretty safe.

-Andi