On Wed, Nov 09, 2005 at 10:35:52AM -0300, Daniel Angelini wrote:
> 
> #sysctl kern.veriexec.strict=1
> sysctl: second level name 'veriexec' in 'kern.veriexec.strict' is invalid
> 

odd - that almost sounds like you don't have veriexec configured in
the kernel.  What happens if you try to load your signatures manually
using:

vereixecctl load /etc/signatures

> sysctl -a |grep veriexec don't show anything.
> 
> My NetBSD is the latest version:
> #uname -a
> NetBSD netbsd 2.1 NetBSD 2.1 (GENERIC_VERIEXEC) #0: Tue Nov  8
> 16:54:30 BRST 2005 
> root@netbsd:/usr/src/sys/arch/i386/compile/GENERIC_VERIEXEC i386

What does your kernel config look like?

-- 
Brett Lymn