Use O_NOFOLLOW when it's there, and needed.

1 files changed, 4 insertions, 0 deletions

diff --git a/lib.c b/lib.c
index fb80d5f3..1d56365e 100644
--- a/lib.c
+++ b/lib.c
@@ -354,6 +354,10 @@ FILE *safe_fopen (const char *path, const char *mode)
     int fd;
     int flags = O_CREAT | O_EXCL;
 
+#ifdef O_NOFOLLOW
+    flags |= O_NOFOLLOW;
+#endif
+
     if (mode[1] == '+')
       flags |= O_RDWR;
     else