--- /dev/null
+diff -Nurp linux-2.6.22.10-vs2.3.0.29.orig/kernel/vserver/inode.c linux-2.6.22.10-vs2.3.0.29-pl01/kernel/vserver/inode.c
+--- linux-2.6.22.10-vs2.3.0.29.orig/kernel/vserver/inode.c 2007-10-29 21:23:59.000000000 -0400
++++ linux-2.6.22.10-vs2.3.0.29-pl01/kernel/vserver/inode.c 2007-11-14 13:56:04.000000000 -0500
+@@ -368,6 +368,9 @@ int __dx_parse_tag(char *string, tag_t *
+ int dx_parse_tag(char *string, tag_t *tag, int remove)
+ {
+ int retval, flags = 0;
++#ifdef CONFIG_VSERVER_FILESHARING
++ flags |= MNT_NOTAGCHECK;
++#endif
+
+ while ((retval = __dx_parse_tag(string, tag, remove)))
+ flags |= retval;
+diff -Nurp linux-2.6.22.10-vs2.3.0.29.orig/kernel/vserver/Kconfig linux-2.6.22.10-vs2.3.0.29-pl01/kernel/vserver/Kconfig
+--- linux-2.6.22.10-vs2.3.0.29.orig/kernel/vserver/Kconfig 2007-10-29 21:23:59.000000000 -0400
++++ linux-2.6.22.10-vs2.3.0.29-pl01/kernel/vserver/Kconfig 2007-11-14 13:55:33.000000000 -0500
+@@ -4,6 +4,15 @@
+
+ menu "Linux VServer"
+
++config VSERVER_FILESHARING
++ bool "(PLANETLAB) Disable Hidden File Module"
++ default y
++ help
++ This retains the module that when a vserver can
++ see a file, it can also stat and read it. The
++ assumption is that chroot() works and vservers
++ are contained that way.
++
+ config VSERVER_AUTO_LBACK
+ bool "Automatically Assign Loopback IP"
+ default y