> I understand your meaning about "the requesting process" being always
> curproc (technically, the currently executing process is doing the
> request, yes :) but I still think that we should aim for full context
> in the kpi and not "the 4 arguments + curproc for this action".

are you going to change KAUTH_PROCESS_CANSIGNAL as well?

and how about other actions?
assuming that you want to make the api itself independent from
what bsd44 secmodel does, i'm afraid that you end up to add
the proc pointer to all actions.

> other than that, is it okay to commit?
> 
> -e.

yes.

YAMAMOTO Takashi