re: How trustworthy is that I/O device?

> What I am saying is that you shouldn't trust it.  We shouldn't have
> underlying assumptions in the code.  We don't in the networking
> code.  Treat it as if it's probably trying to cause a denial of
> service.  I'm saying don't panic, either forcibly unmount or treat
> it as uncacheable and read-only.

solaris introduced "onerror" mount option, that takes options
like "panic", "unmount", "readonly", etc.

i've always thought that was a good idea we should copy.


.mrg.