> I have implemented a syscall to close all descriptors from some value to 
> the max open, that is:
> 	closem(k) will close descriptors k, k+1, ..., max_open_fd

	i like it.  "Secure Programming Cookbook for C and C++" (o'reilly)
	section 1.5 gives a great detail about the security importance of it.

itojun