Affected version: 4.8.x (the option was broken in 4.7, working fine in 4.6) We use `pss.localroot` to restrict the directories available to clients via proxies, but it turns out that the path restriction is not honored on recent XRootD versions: The following file sits outside the configured `pss.localroot` but can happily be accessed by clients: ``` xrdfs xrdcmstzero6.cern.ch:1094 stat /store/mc/RunIISummer17PrePremix/Neutrino_E-10_gun/GEN-SIM-DIGI-RAW/MC_v2_94X_mc2017_realistic_v9-v1/40005/C0482830-37C9-E711-B00A-0242AC130002.root Path: /store/mc/RunIISummer17PrePremix/Neutrino_E-10_gun/GEN-SIM-DIGI-RAW/MC_v2_94X_mc2017_realistic_v9-v1/40005/C0482830-37C9-E711-B00A-0242AC130002.root Id: 223196565536001 Size: 4148278104 MTime: 2017-11-16 05:40:15 Flags: 16 (IsReadable) ``` -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/xrootd/xrootd/issues/650 ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-DEV list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1