Hacker News new | ask | show | jobs
by wizzwizz4 1798 days ago
Because cap_enter() blocks that too.
1 comments
remram 1798 days ago
Specifically, it blocks going higher than the handle, so using either absolute paths or paths with a ".." component.

Not sure if anything changes for symlinks.

link