Fix symlink filesystem exposure