YAMAMOTO Takashi wrote:
>>  - Veriexec loading is done via sysctl() and not ioctl().
> 
> 
> why?

For me the reason is clear:
- ioctl() has something to do with I/O.
- sysctl() has something to do with the system.

Now, the (suggestive) questions are:
- What is the connection between veriexec and I/O?
- What is the connection between veriexec and the system?

Roland