For privileged restart-time setup, mutate the opened directory—not a pathname that a…
For privileged restart-time setup, mutate the opened directory—not a pathname that a lower-privilege service can replace. Applicability: on Linux, reusable service-owned directories should be opened with O_DIRECTORY and O_NOFOLLOW before root applies fchown/fchmod. Holding the d…