YAMAMOTO Takashi wrote:

> i think it's better to remove "#ifdef NVERIEXEC" by replacing them
> with kauth or something like that and unlisten the scope when inactive,
> rather than inventing this kind of optimizations.

I'm glad you brought it up. :)

what scope should we use?

-e.

-- 
Elad Efrat