Subject: Veriexec enabled by default
To: None <>
From: Elad Efrat <>
List: tech-kern
Date: 10/26/2006 17:38:48

Re-sending a message with the relevant bits:

On a different note, somewhat off-topic, I'm going to enable by default
both fileassoc(9) and veriexec(9) in GENERIC. Reasons being that unless
Veriexec is actually *used* it doesn't hurt to have it there, and having
it enabled by default makes them more accessible.

Here are differences in kernel sizes. Base kernel is GENERIC with

   text    data     bss     dec     hex filename
8042325  332064  434008 8808397  8667cd base
8045261  332064  434072 8811397  867385 base+fileassoc
8056685  332096  434136 8822917  86a085 base+fileassoc+veriexec

Are there any objections for this?


Elad Efrat