YAMAMOTO Takashi wrote:
>> for the record, I didn't expect these ugly #ifdefs to remain too long;
>> the goal is to eventually have it all replaced by kauth(9) listeners.
> 
> does it apply to NVERIEXEC, too?
> if so, what's your plan about vn_open?

as blymn@ knows, I've wanted to refactor the veriexec code in vn_open
for quite some time so it can be later, again, factored out to its own
kauth(9) listener.

-e.