Subject: Re: Upcoming security model abstraction
To: YAMAMOTO Takashi <yamt@mwd.biglobe.ne.jp>
From: Elad Efrat <elad@NetBSD.org>
List: tech-security
Date: 09/05/2006 16:05:02
YAMAMOTO Takashi wrote:

> given that only one "secmodel" can be compiled in a kernel,
> it's better to have secmodel_start() for each secmodel.
> __CONCAT here just complicates things unnecessarily, IMO.

If you will be writing your own "overlay" model on-top of bsd44
you will end up with conflicting symbols because code for both
bsd44 and overlay will be compiled in.

__CONCAT() actually simplifies things by calling the "real"
model used.

-e.

-- 
Elad Efrat