From owner-freebsd-security  Thu Mar  6 23:27:54 1997
Return-Path: <owner-security>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id XAA22322
          for security-outgoing; Thu, 6 Mar 1997 23:27:54 -0800 (PST)
Received: from godzilla.zeta.org.au (godzilla.zeta.org.au [203.2.228.19])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id XAA22317
          for <freebsd-security@freebsd.org>; Thu, 6 Mar 1997 23:27:49 -0800 (PST)
Received: (from bde@localhost) by godzilla.zeta.org.au (8.8.3/8.6.9) id SAA05596; Fri, 7 Mar 1997 18:18:25 +1100
Date: Fri, 7 Mar 1997 18:18:25 +1100
From: Bruce Evans <bde@zeta.org.au>
Message-Id: <199703070718.SAA05596@godzilla.zeta.org.au>
To: danny@panda.hilink.com.au, mpp@freefall.freebsd.org
Subject: Re: 4.4BSD NFS File Handles (fwd)
Cc: freebsd-security@freebsd.org
Sender: owner-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

>I've worked on other systems in the past where we only returned
>st_gen if the caller was root.

Why return it at all?  It is not used by any application in /usr/src.

Don't apply the suggested patch without fixing it.  It sets the ASU
accounting flag for all processes with euid root just for calling stat().
It has style bugs.

Bruce