192bdac209
canonicalFilePath() behavior seems to have changed at some point and not existing files outside the public dir will return a 404 rather than a 403. Ideally the logic would be fixed to first check for the file being outside the public directory, directly returning a 403, then checking if the file exists, return a 404 if not, and lastly check for permissions on the file and return a 403 again of denied. However, that would result in a bigger change. Also, the tests were failing all along if syslog exists but is not readable (code is ok, just bad test) but none of our autotesters seemed to have such a setup till now.