> Maybe do this a different way. Instead of invalidating the fd,> prevent the situation. Don't let a process exec a suid binary> while the /proc/*/mem file is open.Denial of service attack then.Alan