On Thu, Aug 22, 2013 at 1:44 PM, Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> wrote: > On Thu, Aug 22, 2013 at 1:22 PM, Andy Lutomirski <luto@xxxxxxxxxxxxxx> wrote: >> >> Let me rephrase that: why do we allow these types of lookup to recurse >> like normal symlinks? I'm proposing that these links immediately >> terminate lookup [..] > > It can nest *inside* a regular symlink. So there should not be any > recursion of pure /proc style symlink jumps, but they live within the > nesting that is normal symlink behavior. > Sure. But aren't they always last? With the current code structure, trying to enforce some kind of security restriction in the middle of lookup seems really unpleasant. But if the final step is to verify one of these links and then either reject or end lookup right there, it'll be (IMO) much easier to understand. --Andy > Linus -- Andy Lutomirski AMA Capital Management, LLC -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
