CVS commit: src

[Elad Efrat <elad%netbsd.org@localhost>]

Module Name:    src
Committed By:   elad
Date:           Sun Nov 26 20:27:27 UTC 2006

Modified Files:
        src/share/man/man9: veriexec.9
        src/sys/kern: kern_verifiedexec.c
        src/sys/miscfs/specfs: spec_vnops.c
        src/sys/sys: verified_exec.h

Log Message:
Implement Veriexec's raw disk policy on-top of kauth(9)'s device scope,
using both the rawio_spec and passthru actions to detect raw disk
activity. Same for kernel memory policy.

Update documentation (no longer need to expose veriexec_rawchk()) and
remove all Veriexec-related bits from specfs.


To generate a diff of this commit:
cvs rdiff -r1.6 -r1.7 src/share/man/man9/veriexec.9
cvs rdiff -r1.71 -r1.72 src/sys/kern/kern_verifiedexec.c
cvs rdiff -r1.96 -r1.97 src/sys/miscfs/specfs/spec_vnops.c
cvs rdiff -r1.40 -r1.41 src/sys/sys/verified_exec.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.