From c352110adc82bc837da275b94e6ba245fc7d5469 Mon Sep 17 00:00:00 2001 From: Yu Watanabe Date: Wed, 21 Sep 2022 03:13:46 +0900 Subject: [PATCH] core/device: refuse alias with ".." --- src/core/device.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/core/device.c b/src/core/device.c index ebe1a934f4f..21dc5890fc5 100644 --- a/src/core/device.c +++ b/src/core/device.c @@ -807,8 +807,8 @@ static int device_setup_extra_units(Manager *m, sd_device *dev, Set **ready_unit continue; } - if (!path_is_normalized(*alias)) { - log_device_warning(dev, "The alias \"%s\" specified in SYSTEMD_ALIAS is not a normalized path, ignoring.", *alias); + if (!path_is_safe(*alias)) { + log_device_warning(dev, "The alias \"%s\" specified in SYSTEMD_ALIAS is not safe, ignoring.", *alias); continue; } -- 2.47.3