Re: veriexec(4) maintenance

[Brett Lymn <blymn%internode.on.net@localhost>]

On Wed, Aug 02, 2023 at 07:47:48AM +0000, Taylor R Campbell wrote:
> veriexec(4), and the fileassoc(9) API it uses internally, needs
> maintenance and probably some serious rework to fix synchronization
> problems on any MP and/or preemptible kernels (i.e., all x86 of the
> past couple decades) with implications for any security properties it
> is supposed to provide.
> 
> If anyone cares about veriexec(4) and would like to volunteer to take
> this on, we can discuss what needs to be done and how to proceed.
> 

I will take this on since I was originally responsible for the mess.  It
does play fast and loose with synchronisation and should be fixed.

I have some fixes in my private tree that went some way to addressing
the issues but they have been languishing for many many years because I
had an issue of a deadlock that would occaisionally occur.  At the time
I couldn't work out where the deadlock was coming from but maybe with
some expert help and the improved tools I can nut it out.

-- 
Brett Lymn
--
Sent from my NetBSD device.

"We are were wolves",
"You mean werewolves?",
"No we were wolves, now we are something else entirely",
"Oh"