Repository navigation
Linux: a matching link kept under its own spelling stays in the deny list - #690
Merged
ronleizrowice-ant merged 1 commit intoOct 12, 2026
Merged
Conversation
…list A denyRead glob keeps a matching symlink under its own spelling when it cannot say where the link leads, and the deny loop resolves it when the mounts are planned. The collapse of a pattern's locations treats every entry as a place, and a link's spelling is not where the link leads. Such links take no part in the collapse and are always in the result. One that only its shorter name resolves, and to the root, denies the directory that holds it, as any link to the root does.
ronleizrowice-ant
deleted the
fix/linux-a-link-kept-as-spelled-keeps-its-mount
branch
October 12, 2026 14:15
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
A
denyReadglob keeps a matching symlink under its own spelling when it cannot say where the link leads. The deny loop resolves it when the mounts are planned. The collapse of a pattern's locations treats every entry as a place, and a link's spelling is not where the link leads.What changes (+9/-4)
/, denies the directory that holds it, as any link to/does.Who sees a difference
Linux only. With every link readable, the mounts and the file system calls are the same. Each link kept as spelled costs four calls and at most one mount.
Testing
Follows #575.