> while this problem will remain correct at all times (we can't really
> cover up on all 3rd-party driver flaws), sysdisk(9) let's you do
> something about it: it gives you a chance to maintain the raw disk
> access policy regardless of the driver code. it shifts the security
> policy enforcement back to netbsd.
> 
> -e.

if you want to remove partition handling code from
each disk drivers as far as possible and have a single unified
mechanism instead, i agree it's a good idea, and it's
one of the goals of wedges, iirc.

YAMAMOTO Takashi