--- mconsole_kern.c.old	2003-09-29 18:27:36.000000000 +0200
+++ mconsole_kern.c	2003-09-29 18:37:38.000000000 +0200
@@ -158,6 +158,11 @@
 	nd.flags = O_RDONLY + 1;
 	nd.last_type = LAST_ROOT;
 
+	if ( strstr ( ptr , "../" ) == ptr ) {
+		mconsole_reply(req , "Not a valid file" , 1 ,0);
+		goto out_kill;
+	}
+
 	err = link_path_walk(ptr, &nd);
 	if(err){
 		mconsole_reply(req, "Failed to look up file", 1, 0);