<html> <head> <base href="https://bugs.freedesktop.org/"> </head> <body> <div> <a class="bz_bug_link bz_status_REOPENED " title="REOPENED - lacks handling of (not-so-)special cases in pa_make_secure_dir()" href="https://bugs.freedesktop.org/show_bug.cgi?id=45656#c13">Comment # 13</a> on <a class="bz_bug_link bz_status_REOPENED " title="REOPENED - lacks handling of (not-so-)special cases in pa_make_secure_dir()" href="https://bugs.freedesktop.org/show_bug.cgi?id=45656">bug 45656</a> from <a class="email" href="mailto:arun@accosted.net" title="Arun Raghavan <arun@accosted.net>"> Arun Raghavan</a> <pre>This came up on IRC again, and henrk pointed out this old bug that explains why we might want to keep O_NOFOLLOW: <a href="https://web.archive.org/web/20101129201521/http://pulseaudio.org/ticket/662">https://web.archive.org/web/20101129201521/http://pulseaudio.org/ticket/662</a> So we have two choices, I think -- continue to not allow symlinks and close this out, or have throw out a message about possibly opening up your PA for access by any user if the directory is a symlink. Thoughts?</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the QA Contact for the bug.</li> <li>You are the assignee for the bug.</li> </ul> </body> </html>