hey,

i have made metahook(9) and veriexec(9) use struct vnode * and struct
mount *. there is no use of dev_t for device identification in any of
them (as requested by yamt@), and the minor detail of using fileid for
hashing is an implementation detail. later, when we can (and if we want
to) we can use the vptofh() routines on the passed vnodes rather than
VOP_GETATTR() and fileid.

this means we can maintain consistent interface, keep the current
working implementation, and later "upgrade" the implementation without
messing up with binary compat and other stuff.

how's that? code:

http://www.bsd.org.il/netbsd/metahook/kern_metahook.c
http://www.bsd.org.il/netbsd/metahook/metahook.h
http://www.bsd.org.il/netbsd/metahook/veriexec.diff

your opinion about the name "metahook" is appreciated when sent OFF
LIST.

-e.

-- 
Elad Efrat