Subject: Re: nfs optimization and veriexec
To: None <elad@bsd.org.il>
From: YAMAMOTO Takashi <yamt@mwd.biglobe.ne.jp>
List: tech-security
Date: 11/13/2007 08:59:43
> If the NFS optimization conflicts only with Veriexec, and it makes sense
> to do so, it's possible to add KAUTH_VERIEXEC_NFS_OPTIMIZE (or
> whatever).
> 
> What do you think?
> 
> -e.

it isn't so different from #ifdef VERIEXEC which is unacceptable for me.

for long term, i want to remove "lookup before create" from vfs.
so i hope to see the assumption is removed from veriexec, rather than
making the rest of kernel veriexec-aware.

YAMAMOTO Takashi