> while replying to Nathaniel's post it dawned on
> me that something like this:
> open("#c/cons", OWRITE|OCEXEC);
> completely breaks the paradigm of namespaces.
>
> IOW, if I wanted to construct a namespace with
> a specially crafted server offering /dev/cons,
> the above would easily break out of that jail.see RFNOMNT in rfork(2). - erik
