[src/netbsd-7]: src/sys/dev Pull up following revision(s), via patch as options

[martin <martin%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/1a011cb3b142
branches:  netbsd-7
changeset: 450957:1a011cb3b142
user:      martin <martin%NetBSD.org@localhost>
date:      Wed May 01 09:47:05 2019 +0000

description:
Pull up following revision(s), via patch as options
differ on the branch (requested by sevan in ticket #1691):

        sys/dev/veriexec.config: revision 1.1

Add a configuration file for enabling Veriexec in kernel config(5) files.

diffstat:

 sys/dev/veriexec.config |  21 +++++++++++++++++++++
 1 files changed, 21 insertions(+), 0 deletions(-)

diffs (25 lines):

diff -r 30a262c71c6e -r 1a011cb3b142 sys/dev/veriexec.config
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/sys/dev/veriexec.config   Wed May 01 09:47:05 2019 +0000
@@ -0,0 +1,21 @@
+# $NetBSD: veriexec.config,v 1.1.4.2 2019/05/01 09:47:05 martin Exp $
+#
+# This file contains all Veriexec related configuration.
+# It is suitable for inclusion in a kernel config(5) file.
+#
+
+options        FILEASSOC               # fileassoc(9) - needed by Veriexec
+                                       # and PAX_SEGVGUARD
+
+# a pseudo device needed for veriexec
+pseudo-device  veriexec
+#
+# Note that removing fingerprint methods will have almost no impact on the
+# kernel code size.
+#
+options VERIFIED_EXEC_FP_MD5
+options VERIFIED_EXEC_FP_RMD160
+options VERIFIED_EXEC_FP_SHA1
+options VERIFIED_EXEC_FP_SHA256
+options VERIFIED_EXEC_FP_SHA384
+options VERIFIED_EXEC_FP_SHA512