On Wed, Dec 05, 2012 at 05:17:25PM +0300, Aleksey Cheusov wrote: > > On the other hand if we generalize improvements of fchdir(2) and fchroot(2) > (I mean EPERM if the current working directory is not at or under the new > root directory), that is reimplement them with a help of kauth(9) we > will be able to do the same for fexecve(2).
I don't think that's necessarily the case (we've discussed why earlier in this terribly fragmented thread). Thor