[PATCH 4/5] acl: dovecot-acl-list is never supposed to be a symlink - use O_NOFOLLOW...

Gbp-Pq: Name 0004-acl-dovecot-acl-list-is-never-supposed-to-be-a-symli.patch

diff --git a/src/plugins/acl/acl-backend-vfile-acllist.c b/src/plugins/acl/acl-backend-vfile-acllist.c
index 75efdece3343e7c02c34460f484c2f94b5bf99dd..7bf471bf7c6b5c8e5f99f01eb707e837948db2cb 100644 (file)
--- a/src/plugins/acl/acl-backend-vfile-acllist.c
+++ b/src/plugins/acl/acl-backend-vfile-acllist.c
@@ -115,7 +115,7 @@ static int acl_backend_vfile_acllist_read(struct acl_backend_vfile *backend)
                        return 0;
        }
 
-       fd = open(path, O_RDONLY);
+       fd = open(path, O_RDONLY | O_NOFOLLOW);
        if (fd == -1) {
                if (errno == ENOENT) {
                        backend->acllist_mtime = 0;