> b) introduces the new system calls fhopen, fhstat, fhstatfs that are > like open but with a file handle instead of a file name. What permission checking happens on these? Isn't this inherently a localhost security hole, if you were to walk the filehandle space? I'm not getting a good description of WHY this needs to happen.