Subject: CVS commit: src
To: None <source-changes@NetBSD.org>
From: Elad Efrat <elad@netbsd.org>
List: source-changes
Date: 11/26/2006 20:27:27
Module Name:	src
Committed By:	elad
Date:		Sun Nov 26 20:27:27 UTC 2006

Modified Files:
	src/share/man/man9: veriexec.9
	src/sys/kern: kern_verifiedexec.c
	src/sys/miscfs/specfs: spec_vnops.c
	src/sys/sys: verified_exec.h

Log Message:
Implement Veriexec's raw disk policy on-top of kauth(9)'s device scope,
using both the rawio_spec and passthru actions to detect raw disk
activity. Same for kernel memory policy.

Update documentation (no longer need to expose veriexec_rawchk()) and
remove all Veriexec-related bits from specfs.


To generate a diff of this commit:
cvs rdiff -r1.6 -r1.7 src/share/man/man9/veriexec.9
cvs rdiff -r1.71 -r1.72 src/sys/kern/kern_verifiedexec.c
cvs rdiff -r1.96 -r1.97 src/sys/miscfs/specfs/spec_vnops.c
cvs rdiff -r1.40 -r1.41 src/sys/sys/verified_exec.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.