netbsd-bugs: kern/30817: veriexec strict level 1 doesn't work

Subject: kern/30817: veriexec strict level 1 doesn't work
To: None <kern-bug-people@netbsd.org, gnats-admin@netbsd.org,>
From: None <erh@swapsimple.com>
List: netbsd-bugs
Date: 07/23/2005 18:34:00

>Number:         30817
>Category:       kern
>Synopsis:       veriexec strict level 1 doesn't work
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jul 23 18:34:00 +0000 2005
>Originator:     Eric Haszlakiewicz
>Release:        NetBSD 3.99.7
>Organization:
>Environment:
System: NetBSD poe.swapsimple.com 3.99.7 NetBSD 3.99.7 (POE) #5: Sat Jul 23 12:58:52 CDT 2005 erh@poe.swapsimple.com:/usr/build/POE i386
Architecture: i386
Machine: i386
>Description:
	According to some messages I found on tech-kern when kern.veriexec.strict
is 1 or above, executables w/o a fingerprint are not allowed to be executed.
This is not the case.
>How-To-Repeat:
	cp /bin/echo /tmp/echo
	sysctl -w kern.veriexec.strict=1
	/tmp/echo foo
	Notice that it runs.
>Fix: