Use blocked paths in symlink probe

OpenSCAP · Dec 18, 2023 · 1604943 · 1604943
1 parent 65a40c5
commit 1604943
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/OVAL/probes/unix/symlink_probe.c b/src/OVAL/probes/unix/symlink_probe.c
@@ -58,6 +58,10 @@ static int collect_symlink(SEXP_t *ent, probe_ctx *ctx)
  if (pathname == NULL) {
  return PROBE_EINVAL;
  }
+ if (probe_path_is_blocked(pathname, ctx->blocked_paths)) {
+ free(pathname);
+ return 0;
+ }
 
  if (lstat(pathname, &sb) == -1) {
  if (errno == ENOENT) {