Do not follow symlinks when performing chmod operations (#185)

QuintenQVD0 · web-flow · commit 9ba7072aa4f4 · 2026-06-18T21:55:25.000-04:00
diff --git a/internal/ufs/fs_unix.go b/internal/ufs/fs_unix.go
@@ -90,7 +90,7 @@ func (fs *UnixFS) Chmodat(dirfd int, name string, mode FileMode) error {
 }
 
 func (fs *UnixFS) fchmodat(op string, dirfd int, name string, mode FileMode) error {
-	return ensurePathError(unix.Fchmodat(dirfd, name, uint32(mode), 0), op, name)
+	return ensurePathError(unix.Fchmodat(dirfd, name, uint32(mode), AT_SYMLINK_NOFOLLOW), op, name)
 }
 
 // Chown changes the numeric uid and gid of the named file.

Original file line number	Diff line number	Diff line change
`@@ -90,7 +90,7 @@ func (fs *UnixFS) Chmodat(dirfd int, name string, mode FileMode) error {`
`90`	`90`	`}`
`91`	`91`
`92`	`92`	`func (fs *UnixFS) fchmodat(op string, dirfd int, name string, mode FileMode) error {`
`93`		`- return ensurePathError(unix.Fchmodat(dirfd, name, uint32(mode), 0), op, name)`
	`93`	`+ return ensurePathError(unix.Fchmodat(dirfd, name, uint32(mode), AT_SYMLINK_NOFOLLOW), op, name)`
`94`	`94`	`}`
`95`	`95`
`96`	`96`	`// Chown changes the numeric uid and gid of the named file.`