On 2025-09-29 04:23, Dag-Erling Smørgrav wrote:
We never asked you to add it.
That's OK, you don't need to use it: you can continue to maintain a separate version of the code, a version that has exactly the same behavior as what's in tzcode.
Though I still hope for an explanation that gives a realistic scenario showing why the openat + O_RESOLVE_BENEATH approach, which is less efficient, provides extra security in practice. I would like to put such an explanation into tzcode as a comment, as it's not obvious.
