tech-kern archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: veriexec

Stathis Kamperis wrote:

In netbsd-4 branch, in veriexecctl(8) man page it says for the signatures file:
"If no options are specified, both direct and indirect execution are implied."

My experience showed that not both execution modes are set by default.
Can anyone please verify it ?

You are correct, looking at the code it seems that only "direct" is set,
see lines 161-168 of src/sbin/veriexecctl/veriexecctl.c revision 1.26.

This was fixed part of a mega-commit and I should probably submit a
patch to fix it on netbsd-4...



Home | Main Index | Thread Index | Old Index