Ideas for changes to Unix filesystem

[Chip Salzenberg]

According to bzs at world.std.com (Barry Shein):
>Ok, granted, if the path to the original file was not accessible and
>was opened by a priv'd program and the fd handed down (e.g. thru an
>open(), setuid() and then an exec()), then an flink() would bypass the
>original directory protection.

What if flink() were permitted only on file descriptors open for
O_RDWR without O_APPEND?  After all, if you have a file descriptor
meeting that description, there's almost nothing bad you can do with
the file that you couldn't do with the file descriptor, slower.
-- 
Chip Salzenberg at Teltronics/TCT     <chip at tct.uucp>, <uunet!pdn!tct!chip>
 "I want to mention that my opinions whether real or not are MY opinions."
             -- the inevitable William "Billy" Steinmetz