Justus Winter, le Fri 19 Jul 2013 17:25:09 +0200, a écrit :
> +  /* check_access performs the same permission check as is normally
> +     done, i.e. it checks that all but the last path components are
> +     executable by the requesting user and that the last component is
> +     readable.       */

Mmm, but we also want to check that the user can read all components,
otherwise we may be revealing directory entries which the user was not
supposed to find out.

Samuel

Reply via email to