Ritesh Raj Sarraf wrote: > Agreed. But instead why not think the other way. > The default configuration shouldn't allow symlink access. If people need it, > it should get explicitly mentioned in their config. If the default configuration should disallow symlinks, then this what the patch should say, instead of doing host-based access. As a patch, I would have expected this to be formulated as a diff file against the sources, also. Regards, Martin