update

tests/TC070-shared-trusted-xattr.md

@@ -0,0 +1,24 @@
+# Test Case: Shared trusted xattr
+
+**Test ID**: TC070-shared-trusted-xattr
+**Fixture**: `basic.erofs`, `/trusted-shared-a`, `/trusted-shared-b`
+
+## Objective
+
+Verify a shared Linux `trusted.*` entry through FreeBSD extattr semantics.
+The transformer must record `e_name_index: 1 -> 4` for the shared record.
+
+## Manual steps
+
+```sh
+lsextattr system /mnt/repo22-g4/trusted-shared-a
+getextattr -qq -x system trusted.config /mnt/repo22-g4/trusted-shared-a
+getextattr -qq -x system trusted.config /mnt/repo22-g4/trusted-shared-b
+su -m nobody -c 'getextattr system trusted.config /mnt/repo22-g4/trusted-shared-a'
+```
+
+## Expected results
+
+Root receives `trusted-shared-value` from both files. FreeBSD exposes the full
+`trusted.config` name in namespace `system`, not a namespace named `trusted`.
+The unprivileged system-namespace request is denied. Clean up the mount/md.