zlacker

>>chmayn+(OP)
I remember an issue that it's security model involved trusting the client. If you exported a file system to a PC, somebody could reboot the PC with Linux to get root and ignore the user permissions.

>>incomp+4b
I believe this can be fixed with kerberos, but in practice very few people probably deploy it that way.