homecreatefilter should probably restrict the access and symlink libc calls as well. See thread on the thinlinc-technical mailing list for more information: http://lists.cendio.se/pipermail/thinlinc-technical/2007-May/000037.html