[GH-ISSUE #518] i have a problem about "--allow-symlink " #300

Closed
opened 2026-04-08 16:51:50 +03:00 by zhus · 4 comments
Owner

Originally created by @yuf19-2022 on GitHub (Dec 31, 2024).
Original GitHub issue: https://github.com/sigoden/dufs/issues/518

--allow-symlink Allow symlink to files/folders outside root directory
i cannot understand how it works

Originally created by @yuf19-2022 on GitHub (Dec 31, 2024). Original GitHub issue: https://github.com/sigoden/dufs/issues/518 --allow-symlink Allow symlink to files/folders outside root directory i cannot understand how it works
zhus closed this issue 2026-04-08 16:51:50 +03:00
Author
Owner

@sigoden commented on GitHub (Dec 31, 2024):

The --allow-symlink option in dufs is used to permit symbolic links (symlinks) that point to files or folders outside the specified root directory of the file server. Normally, for security reasons, file servers restrict access to only the files and folders within a defined root directory to prevent exposure of sensitive information from other parts of the system.

When you enable --allow-symlink, dufs allows these symlinks to be followed, which means users can access files or folders outside the root directory if symlinks within the root directory point to them.

Use this option carefully, as it can inadvertently expose unintended files or directories outside your control to users.

If you still don't understand, please create a symlink directory to test it yourself.

<!-- gh-comment-id:2566091403 --> @sigoden commented on GitHub (Dec 31, 2024): The `--allow-symlink` option in `dufs` is used to permit symbolic links (symlinks) that point to files or folders outside the specified root directory of the file server. Normally, for security reasons, file servers restrict access to only the files and folders within a defined root directory to prevent exposure of sensitive information from other parts of the system. When you enable `--allow-symlink`, `dufs` allows these symlinks to be followed, which means users can access files or folders outside the root directory if symlinks within the root directory point to them. Use this option carefully, as it can inadvertently expose unintended files or directories outside your control to users. If you still don't understand, please create a symlink directory to test it yourself.
Author
Owner

@yuf19-2022 commented on GitHub (Dec 31, 2024):

选项--allow-symlinkindufs用于允许指向文件服务器指定根目录之外的文件或文件夹的符号链接 (symlink)。通常,出于安全原因,文件服务器会限制仅访问定义的根目录中的文件和文件夹,以防止泄露系统其他部分的敏感信息。

当您启用时--allow-symlinkdufs允许跟踪这些符号链接,这意味着如果根目录中的符号链接指向根目录之外的文件或文件夹,用户就可以访问它们。

请谨慎使用此选项,因为它可能会无意中向用户暴露您无法控制的非预期文件或目录。

如果您仍然不明白,请创建一个符号链接目录自行测试。

i have created a symlink link,but how i can access the dir it pointer?when i click the symlink, it will be downloaded

<!-- gh-comment-id:2566095473 --> @yuf19-2022 commented on GitHub (Dec 31, 2024): > 选项`--allow-symlink`in`dufs`用于允许指向文件服务器指定根目录之外的文件或文件夹的符号链接 (symlink)。通常,出于安全原因,文件服务器会限制仅访问定义的根目录中的文件和文件夹,以防止泄露系统其他部分的敏感信息。 > > 当您启用时`--allow-symlink`,`dufs`允许跟踪这些符号链接,这意味着如果根目录中的符号链接指向根目录之外的文件或文件夹,用户就可以访问它们。 > > 请谨慎使用此选项,因为它可能会无意中向用户暴露您无法控制的非预期文件或目录。 > > 如果您仍然不明白,请创建一个符号链接目录自行测试。 i have created a symlink link,but how i can access the dir it pointer?when i click the symlink, it will be downloaded
Author
Owner

@sigoden commented on GitHub (Dec 31, 2024):

I guess you're using a Windows system. Please use mklink to create the symlink.

<!-- gh-comment-id:2566100361 --> @sigoden commented on GitHub (Dec 31, 2024): I guess you're using a Windows system. Please use `mklink` to create the symlink.
Author
Owner

@yuf19-2022 commented on GitHub (Jan 1, 2025):

thankyou

<!-- gh-comment-id:2566806633 --> @yuf19-2022 commented on GitHub (Jan 1, 2025): > thankyou
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sigoden/dufs#300