> 	- In the case of "tftp booted kernel", just return the name per
> 	  the first clause.  You're no worse off than you are now, and
> 	  it will encourage non-use of tftp for loading kernels :-)

Well, it shouldn't necessarily discourage use of tftp, but it
should point to the fact that you ought to take precautions to
make a copy of the kernel accessible in the normal file system
name space after you have booted (e.g. via NFS access).  The
sysctl variable could then be writeable, or you place the
additional restriction on the user that he needs to make (a copy
of) the kernel accessible as /netbsd.

- H=E5vard