[src/netbsd-8]: src/sys/dev Pull up following revision(s) via patch, as optio...

[martin <martin%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/84e99d8e80b9
branches:  netbsd-8
changeset: 450949:84e99d8e80b9
user:      martin <martin%NetBSD.org@localhost>
date:      Wed May 01 09:04:24 2019 +0000

description:
Pull up following revision(s) via patch, as options differ between
current and this branch (requested by sevan in ticket #1251):

        sys/dev/veriexec.config: revision 1.1

Add a configuration file for enabling Veriexec in kernel config(5) files.

diffstat:

 sys/dev/veriexec.config |  21 +++++++++++++++++++++
 1 files changed, 21 insertions(+), 0 deletions(-)

diffs (25 lines):

diff -r 5e4891eb0a27 -r 84e99d8e80b9 sys/dev/veriexec.config
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/sys/dev/veriexec.config   Wed May 01 09:04:24 2019 +0000
@@ -0,0 +1,21 @@
+# $NetBSD: veriexec.config,v 1.1.2.2 2019/05/01 09:04:24 martin Exp $
+#
+# This file contains all Veriexec related configuration.
+# It is suitable for inclusion in a kernel config(5) file.
+#
+
+options        FILEASSOC               # fileassoc(9) - needed by Veriexec
+                                       # and PAX_SEGVGUARD
+
+# a pseudo device needed for veriexec
+pseudo-device  veriexec
+#
+# Note that removing fingerprint methods will have almost no impact on the
+# kernel code size.
+#
+options VERIFIED_EXEC_FP_MD5
+options VERIFIED_EXEC_FP_RMD160
+options VERIFIED_EXEC_FP_SHA1
+options VERIFIED_EXEC_FP_SHA256
+options VERIFIED_EXEC_FP_SHA384
+options VERIFIED_EXEC_FP_SHA512