On Thu, Oct 20, 2005 at 08:43:23AM -0700, Jason Thorpe wrote:
> 
> Perhaps you're mis-understanding how fh*() work.  fhopen() allows you  
> to open a file (using a file handle) that you DO NOT currently have  
> open, and bypasses the full path permission checking along the way.   
> For this reason, its use is restricted to the superuser.

And NFS...
Given an inode number and its generation number (and a bit of inside
knowledge) you can generate the NFS file handle for the inode.
So if you have access to any of the filesystem, you can that inode.

	David

-- 
David Laight: david@l8s.co.uk