Issue Description

Export from Cockpit can be stored outside of the /var/lib/dirsrv/slapd-instance_name/ldif/ directory. You can use this to override files, such as dse.ldif or to fill the root partition.

Package Version and Platform

389-ds-base-1.4.1.6-20190813git7a24286f1.el8.x86_64

Steps to reproduce

1. Open 389 DS in Cockpit
2. Database / Select a suffix / click "Suffix Tasks" / click "Export Suffix"
3. Enter, for example: ../../../../../etc/dirsrv/slapd-instance_name/dse.ldif to override the dse.ldif file.

Actual results

By using relative paths, you can store files outside of /var/lib/dirsrv/slapd-instance_name/ldif/. This can be used to override other LDIF files (I tired overriding other files on which dirsrv had write permissions, but it only overwrote .ldif files) or you can use it to fill up other file systems.

The example above overrides the dse.ldif file. I know that DS recovers the file from dse.ldif.bak if you restart the service, but it is very scary. Maybe operations might fail until the service has been restarted. I haven't checked this.

Expected results

Exports should only be stored in /var/lib/dirsrv/slapd-instance_name/ldif/