On Thu, Jan 08, 2009 at 07:57:42PM +0000, Charles Forsyth wrote: > >It now seems, that if your process has a read/write access to > >a channel capable of speaking 9P not letting it mount that > >channel really doesn't accomplish much: whatever messages kernel > >would send on your behalf, you can send directly. > > note that if a Chan has once been mounted it can no longer > be read or written except through devmnt.
That's not much of a security guarantee since there's a race window when a channel is first posted to '#s' (e.g.), but yes, it's better than nothing. --nwf;
pgpgE6xBMlV2f.pgp
Description: PGP signature
