Re: Automatic downloading of non-free software by stuff in main
On Thu, Dec 07, 2017 at 03:27:42AM +0100, Adam Borowski wrote:
> On Thu, Dec 07, 2017 at 01:33:41AM +0000, Ben Hutchings wrote:
> > On Wed, 2017-12-06 at 19:14 -0500, Michael Stone wrote:
> > > On Thu, Dec 07, 2017 at 12:09:22AM +0000, Ben Hutchings wrote:
> > > > That's only because it lives in mm/shmem.c, not under fs/. It does
> > > > support xattrs.
> > >
> > > Have you tried it?
> > Ah, damnit. It supports *some* xattrs (like the security namespace),
> > but apparently not *user* xattrs.
> Good. While xattrs have some uses, this is a hidden privacy hole most users
> aren't aware of (although /tmp/ is the filesystem least likely to be used
> forensically against you).
Which makes the XDG thing borderline, since the only indicator that a file
has been downloaded they propose is the full url, not a boolean.