Fix TOCTOU race condition in file content probes - #2406

Open

Arden97 wants to merge 3 commits into

OpenSCAP:mainfrom

Arden97:toctou_symlink_following

Commits on Sep 4, 2026

get file descriptor before getting attributes for filecontent probes
Arden97
committed
ac98e0f
adding prefix stripping to probe_fd_path_is_blocked
Arden97
committed
a1c7d52
adding test for probing ignored paths through symlnks
Arden97
committed
30db6ed