> > but there is nothing prevents multiple instances of the executables from
> > running, right?
> 
> /dev/veriexec is limited to one user at a time:
> 
> 	http://nxr.netbsd.org/source/xref/sys/dev/verified_exec.c#119
> 
> and that user must be root:
> 
> 	http://nxr.netbsd.org/source/xref/sys/dev/verified_exec.c#116

ok, then it's somehow serialized.  it's what i wanted to know.  thanks.

YAMAMOTO Takashi