Complete provension of rm'ing / without direct forced argument?

[Ethin Probst]

Hello all,
I am writing this message to propose a feature enhancement that would
not allow users to delete the root file system (/) when executing rm
-rf. This proposal, if approved, implements a new argument,
--delete-root-filesystem, which would perform the old behavior.
Without this argument, rm -rf (or it's variants) would not allow this
to occur. --delete-root-filesystem would need to be specified in full,
and even then rm would prompt you to ensure you wanted this to occur.
For exploits that require simlinks to /, rm would notify you that this
is a simlink and require that --delete-root-filesystem be specified.
Please think on this.

-- 
Signed,
Ethin D. Probst