On Thu, Jun 25, 2020 at 11:14:27AM +0100, Jeremy Harris via Exim-users wrote: > > And I'm just curious, what a usage pattern was targeted to create two
> > distinct filters "dir" and "subdir" with such small difference?
>
> subdir for the usual case where you really do not want an
> attacker to be traversing upwards in your filesystem;
> dir for generality.
Isn't it easier to remove "." and ".." from dsearch scan list et al?
Really they are special built-in items in majority of file systems,
so it's pointless to put real data into such "files" and consequently
no sense to lookup it.
--
Eugene Berdnikov
