Differential D59271
vfs: allow lookup through VV_READLINK vnodes Authored by chris.longros_gmail.com on Sun, Aug 30, 7:24 AM.
Details When fdescfs(5) is mounted with linrdlnk, /dev/fd/N uses VV_READLINK, so a lookup through a path like /dev/fd/N/name fails with ENOTDIR. I hit the issue trying to run the latest claude-code 2.1.251 that introduced "Fixed file tools (Read, Write, Edit) following a symlink swapped inside the working directory after the permission check, which could read or write outside the approved location" Tested on FreeBSD 16 CURRENT with a patched kernel.
Diff Detail
Event TimelineComment Actions This is a special case that should be not handled by the generic VFS lookup code. Ideally, it should be contained to the fdescfs vop_lookup(). I am not sure how, the obvious idea to change the vnode return type when !ISLASTCN has some drawbacks, at very least the vnode must be reclaimed on deactivation, might be it would work then. Also, please provide the minimal sample that shows the desired behavior. |