On Thu, Jan 25, 2007 at 09:07:27PM +0100, Pavel Cahyna wrote:
> 
> Could nullfs encrypt the filehandles of the underlying filesystem and use
> those encrypted filehandles for NFS?

What should actually happen is what e.g. Solaris does: the filehandle
given to the client should *always* be generated from the exported
directory and underlying filesystem specific data, rather than the
underlying data alone.  This would allow export of arbitrary directories
with different permissions.

No, I am not volunteering to do this.  The code could possibly be lifted
from a userspace NFS server such as amd, however.

-- 
Thor Lancelot Simon	                               tls@rek.tjls.com
  "All of my opinions are consistent, but I cannot present them all
   at once."	-Jean-Jacques Rousseau, On The Social Contract