Re: O_NOFOLLOW and safer chdir

On Dec 22 15:14, Eric Blake wrote: > CVS coreutils now uses 's O_NOFOLLOW, when > available, to avoid a data race when changing directories while > avoiding symlinks (necessary for some traversal algorithms). Normally, > calling lstat() to prove something is a directory, followed by chdir(), > is

O_NOFOLLOW and safer chdir

CVS coreutils now uses 's O_NOFOLLOW, when available, to avoid a data race when changing directories while avoiding symlinks (necessary for some traversal algorithms). Normally, calling lstat() to prove something is a directory, followed by chdir(), is a security risk, since lstat() could see a di