From 6d12937cc7ce15b6f8aa58e17d753395fb71c1ea Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Tue, 30 May 2017 10:47:23 -0400 Subject: enable protected_{symlinks,hardlinks} by default --- fs/namei.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'fs') diff --git a/fs/namei.c b/fs/namei.c index bbd730b2e..53776cead 100644 --- a/fs/namei.c +++ b/fs/namei.c @@ -735,8 +735,8 @@ static inline void put_link(struct nameidata *nd, struct path *link, void *cooki path_put(link); } -int sysctl_protected_symlinks __read_mostly = 0; -int sysctl_protected_hardlinks __read_mostly = 0; +int sysctl_protected_symlinks __read_mostly = 1; +int sysctl_protected_hardlinks __read_mostly = 1; /** * may_follow_link - Check symlink following for unsafe situations -- cgit v1.2.3