On Fri, Feb 05, 2016 at 11:39:15AM +0000, Simon Hobson wrote:
>
> Of course, unless you physically remove support for the virtual
> filesystem, then there's nothing to stop any program with enough
> privileges to mount the filesystem when it wants.

And that's the proble with the root model of administrative software.
You either have all the privileges to do anything, or none. There's no
mechanism to be granted jusst the provileges actually needed.

-- hendrik