proc: reject "." and ".." as filenames