From 581f0c74006beb3edd28babbebeda7e48b3fa1d6 Mon Sep 17 00:00:00 2001 From: DavidHLP Date: Mon, 14 Sep 2026 10:03:31 +0800 Subject: [PATCH] fix(cli): keep macOS alias policy unchanged Signed-off-by: DavidHLP --- src/cli/activation_transaction.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/cli/activation_transaction.c b/src/cli/activation_transaction.c index 9494b70de..dcdb4a20c 100644 --- a/src/cli/activation_transaction.c +++ b/src/cli/activation_transaction.c @@ -895,7 +895,11 @@ static char *activation_posix_walk_path(const char *directory) { * root-owned aliases (for example /tmp and /home on Atomic systems). * Resolve only these trusted system aliases; arbitrary user symlinks must * still fail the O_NOFOLLOW walk below. */ +#ifdef __linux__ static const char *const aliases[] = {"/tmp", "/var", "/home"}; +#else + static const char *const aliases[] = {"/tmp", "/var"}; +#endif for (size_t index = 0; index < sizeof(aliases) / sizeof(aliases[0]); index++) { const char *alias = aliases[index]; size_t alias_length = strlen(alias);