Subject: Re: kern/35351 (Re: CVS commit: src/sys/kern)
To: None <kern-bug-people@netbsd.org, gnats-admin@netbsd.org,>
From: Elad Efrat <e@murder.org>
List: netbsd-bugs
Date: 04/07/2007 17:55:02
The following reply was made to PR kern/35351; it has been noted by GNATS.
From: Elad Efrat <e@murder.org>
To: YAMAMOTO Takashi <yamt@mwd.biglobe.ne.jp>
Cc: tech-kern@netbsd.org, gnats-bugs@netbsd.org
Subject: Re: kern/35351 (Re: CVS commit: src/sys/kern)
Date: Sat, 07 Apr 2007 20:50:19 +0200
YAMAMOTO Takashi wrote:
> but there is nothing prevents multiple instances of the executables from
> running, right?
/dev/veriexec is limited to one user at a time:
http://nxr.netbsd.org/source/xref/sys/dev/verified_exec.c#119
and that user must be root:
http://nxr.netbsd.org/source/xref/sys/dev/verified_exec.c#116
> anyway, i understood that you are considering that fileassoc (on netbsd-4)
> is only for veriexec. it was not clear to me.
for now, yes.
> thanks for explanation.
sure.
-e.