CVS commit: src/sys

[Elad Efrat <elad%netbsd.org@localhost>]

Module Name:    src
Committed By:   elad
Date:           Sat Dec 30 15:26:55 UTC 2006

Modified Files:
        src/sys/kern: kern_verifiedexec.c vfs_vnops.c
        src/sys/sys: verified_exec.h

Log Message:
Avoid TOCTOU in Veriexec by introducing veriexec_openchk() to enforce
the policy and using a single namei() call in vn_open().


To generate a diff of this commit:
cvs rdiff -r1.87 -r1.88 src/sys/kern/kern_verifiedexec.c
cvs rdiff -r1.129 -r1.130 src/sys/kern/vfs_vnops.c
cvs rdiff -r1.47 -r1.48 src/sys/sys/verified_exec.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.