>> "JH" == Joey Hess <joey@kitenet.net> writes: JH> The point is that a normal open command doesn't necessarily create JH> a file. If the file exists and is a symlink, it follows the JH> symlink and opens the file. You have to use the O_CREAT and O_EXCL JH> flags to open(2) to be safe. I see. Hopefully, someone has some URL with more info about securing software. This is definitly something I want to check. Thanks, Martin