Arbitrary file modification via privileged symlink race

Race condition in cockpit-files on Red Hat Enterprise Linux 9 allows local users to alter ownership or permissions on arbitrary files. During privileged ownership or permission changes, cockpit-files checks a target path and later acts on it without preventing replacement by a symlink. Exploitation requires a privileged Cockpit user to operate in an attacker-writable directory while the local attacker wins the timing race.