Subject: Re: Getting rid of /dev/veriexec
To: Elad Efrat <elad@NetBSD.org>
From: Quentin Garnier <cube@cubidou.net>
List: tech-kern
Date: 12/02/2005 13:30:40
--eNMatiwYGLtwo1cJ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Dec 02, 2005 at 02:24:37PM +0200, Elad Efrat wrote:
> Hi,
>=20
> The attached patch does the following:
>=20
>   - Veriexec loading is done via sysctl() and not ioctl().
>   - Adds ability to delete entries from a Veriexec table.
>=20
> This will allow us to remove /dev/veriexec.
>=20
> Please have a look; if no one object I'll commit this next
> week.

What's the path to update a system from a device-aware veriexectl and
matching kernel to a sysctl-aware veriexectl and matching kernel?

--=20
Quentin Garnier - cube@cubidou.net - cube@NetBSD.org
"When I find the controls, I'll go where I like, I'll know where I want
to be, but maybe for now I'll stay right here on a silent sea."
KT Tunstall, Silent Sea, Eye to the Telescope, 2004.

--eNMatiwYGLtwo1cJ
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (NetBSD)

iQEVAwUBQ5A+cNgoQloHrPnoAQKx8ggAxX7Dk1Mrsv+S+v4yO9jjYr6szMhnhBun
AhZikuIPQwRZvP+0IdNnqRTmKqXP4sIjz//OckgoJdOiaRAdzBUXoVuWFoRnrmV8
f6Bqttls+JSuE0xatY9YW0QpMhgSyywjl094LJuhN1kbdpEUeaAk+p/o5q2udp17
E/KOFBcVHsvAjsTri6L2zwWH+4Vh0/SGsusYDSDR/I26z3XKqiYKwocSatmSQJjz
ZxxsEzepZqDL2ajCvuUXGQmQHXyO9djdbWCRQb3XVEaIZiro5oxbnyREq8aMJFKA
AFTMi/FREoy7qmW8561lk7nc/zTbQ4YfGj/FPXTVSuMpSCtIQrcZZQ==
=v9Ra
-----END PGP SIGNATURE-----

--eNMatiwYGLtwo1cJ--