Re: TOCTOU symlink race bypasses --operatingdir confinement

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------Q0S8hDmJ3p81U67nCF2Ar4J7
Content-Type: multipart/mixed; boundary="------------z1IEA90nYVjorU6KJ0ma1yBD";
 protected-headers="v1"
From: Benno Schulenberg <[email protected]>
To: zero_o <[email protected]>, [email protected]
Message-ID: <[email protected]>
Subject: Re: TOCTOU symlink race bypasses --operatingdir confinement
References: <[email protected]>
In-Reply-To: <[email protected]>

--------------z1IEA90nYVjorU6KJ0ma1yBD
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64
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--------------z1IEA90nYVjorU6KJ0ma1yBD--

--------------Q0S8hDmJ3p81U67nCF2Ar4J7
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature.asc"

-----BEGIN PGP SIGNATURE-----
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=0Imm
-----END PGP SIGNATURE-----

--------------Q0S8hDmJ3p81U67nCF2Ar4J7--