> YAMAMOTO Takashi wrote:
> >> +				/* Enforce 'nodev', 'nosuid', for non-root */
> >> +				*flags |= MNT_NODEV | MNT_NOSUID;
> > 
> > this kind of structure makes the order of listeners important.
> > i'm not sure if it's a good idea.
> > 
> > YAMAMOTO Takashi
> 
> I know. I've discussed it with blymn@ a bit, and the alternatives didn't
> seem like they'd pass.

what are alternatives?

> do you have any idea how this can be done otherwise?
> 
> -e.

having additional kauth calls for these bits?

YAMAMOTO Takashi