From c190dcdbbd623b76a2be7c41240fcc9ede35bac8 Mon Sep 17 00:00:00 2001
From: Jakob Unterwurzacher
Date: Sat, 7 Feb 2026 21:19:14 +0100
Subject: darwin: syscallcompat: Openat: use O_SYMLINK

Also add tests that opening a symlink (using unix.O_PATH | unix.O_NOFOLLOW)
works.

https://github.com/rfjakob/gocryptfs/issues/993
---
 internal/syscallcompat/sys_linux.go | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'internal/syscallcompat/sys_linux.go')

diff --git a/internal/syscallcompat/sys_linux.go b/internal/syscallcompat/sys_linux.go
index 19d2c56..71478af 100644
--- a/internal/syscallcompat/sys_linux.go
+++ b/internal/syscallcompat/sys_linux.go
@@ -28,6 +28,10 @@ const (
 	RENAME_NOREPLACE = unix.RENAME_NOREPLACE
 	RENAME_WHITEOUT  = unix.RENAME_WHITEOUT
 	RENAME_EXCHANGE  = unix.RENAME_EXCHANGE
+
+	// On Darwin we use O_SYMLINK which allows opening a symlink itself.
+	// On Linux, we only have O_NOFOLLOW.
+	OpenatFlagNofollowSymlink = unix.O_NOFOLLOW
 )
 
 var preallocWarn sync.Once
-- 
cgit v1.2.3