Subject: Re: nfs optimization and veriexec
To: None <>
From: YAMAMOTO Takashi <>
List: tech-kern
Date: 11/13/2007 08:59:43
> If the NFS optimization conflicts only with Veriexec, and it makes sense
> to do so, it's possible to add KAUTH_VERIEXEC_NFS_OPTIMIZE (or
> whatever).
> What do you think?
> -e.

it isn't so different from #ifdef VERIEXEC which is unacceptable for me.

for long term, i want to remove "lookup before create" from vfs.
so i hope to see the assumption is removed from veriexec, rather than
making the rest of kernel veriexec-aware.