YAMAMOTO Takashi wrote:

> but there is nothing prevents multiple instances of the executables from
> running, right?

/dev/veriexec is limited to one user at a time:

	http://nxr.netbsd.org/source/xref/sys/dev/verified_exec.c#119

and that user must be root:

	http://nxr.netbsd.org/source/xref/sys/dev/verified_exec.c#116

> anyway, i understood that you are considering that fileassoc (on netbsd-4)
> is only for veriexec.  it was not clear to me.

for now, yes.

> thanks for explanation.

sure.

-e.