Stathis Kamperis wrote:
In netbsd-4 branch, in veriexecctl(8) man page it says for the signatures file: "If no options are specified, both direct and indirect execution are implied." My experience showed that not both execution modes are set by default. Can anyone please verify it ?
You are correct, looking at the code it seems that only "direct" is set, see lines 161-168 of src/sbin/veriexecctl/veriexecctl.c revision 1.26. This was fixed part of a mega-commit and I should probably submit a patch to fix it on netbsd-4... Thanks, -e.