Subject: Re: Veriexec enabled by default
To: None <>
From: YAMAMOTO Takashi <>
List: tech-kern
Date: 10/27/2006 21:04:46
> Someone suggested trying to reduce the overhead even more. So, attached
> diff produces these numbers:

i think it's better to remove "#ifdef NVERIEXEC" by replacing them
with kauth or something like that and unlisten the scope when inactive,
rather than inventing this kind of optimizations.