Subject: Re: Veriexec enabled by default
To: YAMAMOTO Takashi <>
From: Elad Efrat <>
List: tech-kern
Date: 10/27/2006 17:20:08
YAMAMOTO Takashi wrote:

> i think it's better to remove "#ifdef NVERIEXEC" by replacing them
> with kauth or something like that and unlisten the scope when inactive,
> rather than inventing this kind of optimizations.

I'm glad you brought it up. :)

what scope should we use?


Elad Efrat