Virtual File System

Limitations of Unix model
Code that manages file systems is in the kernel
Corrupt backing store means a kernel panic or system compromise
Users can do nothing: question of security

Safe manipulation of the VFS
Protocol is outside of the kernel
Requires no special privileges
Cannot effect other users
Server segmentation fault
Like any other SIGSEGV; server terminated
Only those that rely on the server are affected
System does not notice