Tony Finch <dot@xxxxxxxx> wrote: > According to POSIX, if you open the directory with O_SEARCH then openat() > does not re-check search (+x) permissions. My 2.6.26 kernel (or Debian lenny) does not seem to know about O_SEARCH. But anyway... even if openat() does not re-check permissions, it should surely fail when in fact it does not have permissions? Surely, directory contents are not cached? Or, do you have an example (of a running OS) where openat() succeeds without permissions? Cheers, Paul Paul Szabo psz@xxxxxxxxxxxxxxxxx http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia