to den 28.04.2005 Klokka 15:38 (-0700) skreiv Bryan Henderson:> >Root.That is much harder to do. The nfs server would have to take over thepermissions checking on behalf of whatever it is exporting for alloperations.> >.The lack of agreement on root squashing is a reason for it to be amatter of administrator-defined policy, and why the solution chosen_should_ allow for that kind of behaviour.If the user is free to futz around with the namespace, then it makes alot of sense for administrators to want to restrict access to thisuser-defined namespace to non-suid programs that won't start screwinground with opening files on arbitrary filesystems using the wrongcredentials and/or capabilities.Particularly so if the user is capable of mounting remote filesystems