Nasal security: document that symlinks are no longer followed

diff --git a/src/Main/fg_commands.cxx b/src/Main/fg_commands.cxx
index 442787662c1995a17f292dfe7ee8b873c964c89d..032db16e6cefa3f03afe8229c5b9f22c671327e9 100644 (file)
--- a/src/Main/fg_commands.cxx
+++ b/src/Main/fg_commands.cxx
@@ -1177,7 +1177,7 @@ do_load_xml_to_proptree(const SGPropertyNode * arg)
     
     if (fgValidatePath(file, false).empty()) {
         SG_LOG(SG_IO, SG_ALERT, "loadxml: reading '" << file.str() << "' denied "
-                "(unauthorized access)");
+                "(unauthorized directory - authorization no longer follows symlinks; to authorize reading additional directories, add them to --fg-aircraft)");
         return false;
     }
 
@@ -1259,7 +1259,7 @@ do_save_xml_from_proptree(const SGPropertyNode * arg)
 
     if (fgValidatePath(file, true).empty()) {
         SG_LOG(SG_IO, SG_ALERT, "savexml: writing to '" << file.str() << "' denied "
-                "(unauthorized access)");
+                "(unauthorized directory - authorization no longer follows symlinks)");
         return false;
     }
 

diff --git a/src/Scripting/NasalSys.cxx b/src/Scripting/NasalSys.cxx
index d37afa7012285f737b4f3d2b732d785301500139..ca4034f5f6720f56244023d3f9e75dd7db1f9bee 100644 (file)
--- a/src/Scripting/NasalSys.cxx
+++ b/src/Scripting/NasalSys.cxx
@@ -675,7 +675,7 @@ static naRef f_open(naContext c, naRef me, int argc, naRef* args)
         strcmp(modestr, "rb") && strcmp(modestr, "r"));
     if(filename.empty()) {
         naRuntimeError(c, "open(): reading/writing '%s' denied "
-                "(unauthorized access)", naStr_data(file));
+                "(unauthorized directory - authorization no longer follows symlinks; to authorize reading additional directories, add them to --fg-aircraft)", naStr_data(file));
         return naNil();
     }
     f = fopen(filename.c_str(), modestr);
@@ -706,7 +706,7 @@ static naRef f_parsexml(naContext c, naRef me, int argc, naRef* args)
     std::string file = fgValidatePath(naStr_data(args[0]), false);
     if(file.empty()) {
         naRuntimeError(c, "parsexml(): reading '%s' denied "
-                "(unauthorized access)", naStr_data(args[0]));
+                "(unauthorized directory - authorization no longer follows symlinks; to authorize reading additional directories, add them to --fg-aircraft)", naStr_data(args[0]));
         return naNil();
     }
     std::ifstream input(file.c_str());