Subject: Re: veriexec (Re: CVS commit: src)
To: YAMAMOTO Takashi <yamt@mwd.biglobe.ne.jp>
From: Elad Efrat <elad@NetBSD.org>
List: tech-kern
Date: 09/30/2006 15:22:00
YAMAMOTO Takashi wrote:
>>>>> btw, what's the point to distinguish "indirect" from "direct"?
>>>> For this case or in general?
>>> in the design of veriexec.
>>>
>>> YAMAMOTO Takashi
>> Distinguish between programs you execute directly via exec and programs
>> that get executed "indirectly" as script interpreters or libraries that
>> mapped executable.
> 
> my questions was, why do you want to distinguish them?

To control how programs are being accessed. Part of being a feature of
Veriexec that I know for a fact people are making use of, it also helps
to elegantly solve other problems in, say, TPE.

It's a good thing. :)

-e.

-- 
Elad Efrat