Skip to content

Commit

Permalink
Disallow metadata via mount options
Browse files Browse the repository at this point in the history
Adds NoAppleDouble and NoAppleXattr to the default mount options.
AppleDouble is the technique of storing extended attributes in regular
files (._*). NoAppleXattr prevents Finder from looking for "com.apple.*"
xattrs.

Neither of these options prevent the "session" xattr from being read.
  • Loading branch information
bwester committed Oct 28, 2016
1 parent d14e375 commit 745c59d
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions bin/consulfs/main.go
Original file line number Diff line number Diff line change
Expand Up @@ -89,6 +89,8 @@ func main() {
mountOptions := []fuse.MountOption{
fuse.DefaultPermissions(),
fuse.DaemonTimeout(fmt.Sprint(int64(timeoutDuration.Seconds() + 1))),
fuse.NoAppleDouble(),
fuse.NoAppleXattr(),
}
if *allowOther {
mountOptions = append(mountOptions, fuse.AllowOther())
Expand Down

0 comments on commit 745c59d

Please sign in to comment.