On: Unveil(2) – Unveil parts of a restricted filesystem view

[blattimwind]

> or just an inode? But then how is inode re-use handled?

inodes have generations. Each reuse increments generation. (ino, generation) tuple uniquely identifies an object within the file system.

[dchest → blattimwind]

This is correct, however generation is mostly needed (and was created) for NFS, and rarely used for anything else. Unveal lives in kernel, it just keeps a reference to vnode (https://github.com/openbsd/src/blob/03249988e9bbffb48a568839...)

[avar → blattimwind]

Thanks. I was wrong about that, I was confusing this with PID re-use.