tech-security: Re: Getting rid of /dev/veriexec

Subject: Re: Getting rid of /dev/veriexec
To: Nathan J. Williams <nathanw@wasabisystems.com>
From: Brett Lymn <blymn@baesystems.com.au>
List: tech-security
Date: 12/03/2005 23:26:15

On Fri, Dec 02, 2005 at 10:20:52AM -0500, Nathan J. Williams wrote:
> 
> Just so I'm clear, this is a side issue, yes? There's no kmem
> grovelling involved in veriexec?
> 

There is no kmem grovelling involved in veriexec and there never was.
Currently, data is loaded via ioctl's on /dev/veriexec, knobs that
control veriexec behaviour are tweaked via sysctl.

-- 
Brett Lymn