question: sandbox for following symlinks

[shqld]

It looks there is differences about handling symlinks between uvwasi and wasmtime.

Assuming #224 was merged and given the file path is /var/dir/file and sandbox root is /var/dir:

Link Target \ Runtime	wasmtime	uvwasi	(memo)
/var/dir/file	NG	OK	wasmtime prohibits absolute paths without exception
./file	OK	OK
../file	NG	NG	not in the sandbox root
../dir/file	NG	OK	wasmtime prohibits relative paths referencing a path that once deviates from the root of the sandbox

I'd like to know whether this is expected behavior for uvwasi.

[mhdawson]

To confirm so you are aware your earlier PR and related questions from others have kicked off discussion on the topic and related issues which may take us a bit of time to get through.

[shqld]

Understood, thank you so much.