On Wed, Nov 2, 2016 at 5:43 AM, Konstantin Belousov <k...@freebsd.org> wrote: > Author: kib > Date: Wed Nov 2 12:43:15 2016 > New Revision: 308212 > URL: https://svnweb.freebsd.org/changeset/base/308212 > > Log: > Allow some dotdot lookups in capability mode. > > If dotdot lookup does not escape from the file descriptor passed as > the lookup root, we can allow the component traversal. Track the > directories traversed, and check the result of dotdot lookup against > the recorded list of the directory vnodes. > > Dotdot lookups are enabled by sysctl vfs.lookup_cap_dotdot, currently > disabled by default until more verification of the approach is done.
Hi Konstantin, Are we waiting on a specific reviewer or something else? It would be very nice to have this enabled by default. Thanks, Conrad _______________________________________________ svn-src-head@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/svn-src-head To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"
