mkdir: don't allow us to get confused by symlinks in mkdir_p_root()'s chowning logic

diff --git a/src/basic/mkdir.c b/src/basic/mkdir.c
index 8e4849b7926c07504d3e8140c05f13a4cced6a9e..cd966cba9420662f2db007aab7d48326d5d0aa3d 100644 (file)
--- a/src/basic/mkdir.c
+++ b/src/basic/mkdir.c
@@ -233,7 +233,7 @@ int mkdir_p_root(const char *root, const char *p, uid_t uid, gid_t gid, mode_t m
         if (uid_is_valid(uid) || gid_is_valid(gid)) {
                 _cleanup_close_ int nfd = -1;
 
-                nfd = openat(dfd, bn, O_RDONLY|O_CLOEXEC|O_DIRECTORY);
+                nfd = openat(dfd, bn, O_RDONLY|O_CLOEXEC|O_DIRECTORY|O_NOFOLLOW);
                 if (nfd < 0)
                         return -errno;