3 files changed, 13 insertions, 17 deletions

diff --git a/src/firejail/fs.c b/src/firejail/fs.c
index 1fc1c0942..5b8093885 100644
--- a/src/firejail/fs.c
+++ b/src/firejail/fs.c
@@ -152,27 +152,24 @@ static char *create_empty_file(void) {
         return RO_FILE;
 }
 
-static void disable_file(OPERATION op, const char *fname, const char *emptydir, const char *emptyfile) {
-        assert(fname);
+static void disable_file(OPERATION op, const char *filename, const char *emptydir, const char *emptyfile) {
+        assert(filename);
         assert(emptydir);
         assert(emptyfile);
         assert(op <OPERATION_MAX);
-
-        // if the file is a link, follow the link
-        char *lnk = NULL;
-        if (is_link(fname)) {
-                lnk = get_link(fname);
-                if (lnk)
-                        fname = lnk;
-                else
-                        fprintf(stderr, "Warning: cannot follow link %s, skipping...\n", fname);
+        
+        // Resolve all symlinks
+        char* fname = realpath(filename, NULL);
+        if (fname == NULL) {
+                printf("Warning: %s is an invalid file, skipping...\n", filename);
+                return;
         }
         
         // if the file is not present, do nothing
         struct stat s;
         if (stat(fname, &s) == -1) {
-                if (lnk)
-                        free(lnk);
+                printf("Warning: %s does not exist, skipping...\n", fname);
+                free(fname);
                 return;
         }
 
@@ -211,8 +208,7 @@ static void disable_file(OPERATION op, const char *fname, const char *emptydir,
         else
                 assert(0);
 
-        if (lnk)
-                free(lnk);
+        free(fname);
 }
 
 static void globbing(OPERATION op, const char *fname, const char *emptydir, const char *emptyfile) {
diff --git a/src/man/firejail-profile.txt b/src/man/firejail-profile.txt
index ff265c198..4941d8b8b 100644
--- a/src/man/firejail-profile.txt
+++ b/src/man/firejail-profile.txt
@@ -130,7 +130,7 @@ Enable an user namespace without root user defined.
 
 .SH Resource limits
 These profile entries define the limits on system resources (rlimits) for the processes inside the sandbox.
-The limits can be modified inside the sandbox using the regular \fBulimt\fR command. Examples:
+The limits can be modified inside the sandbox using the regular \fBulimit\fR command. Examples:
 
 .TP
 \f\rlimit-fsize 1024
diff --git a/src/man/firejail.txt b/src/man/firejail.txt
index 21310aebc..fe2a909c9 100644
--- a/src/man/firejail.txt
+++ b/src/man/firejail.txt
@@ -734,7 +734,7 @@ sysfs,_sysctl, adjtimex, clock_adjtime, lookup_dcookie, perf_event_open, fanotif
 .br
 Example:
 .br
-$ firejail \-\-sccomp
+$ firejail \-\-seccomp
 .TP
 \fB\-\-seccomp=syscall,syscall,syscall
 Enable seccomp filter, blacklist the default list and the syscalls specified by the command.