[src/netbsd-3]: src/sys/sys Pull up revision 1.16 (requested by elad in ticke...

[snj <snj%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/a09ff8b24841
branches:  netbsd-3
changeset: 576868:a09ff8b24841
user:      snj <snj%NetBSD.org@localhost>
date:      Fri Aug 12 06:45:42 2005 +0000

description:
Pull up revision 1.16 (requested by elad in ticket #644):
Support multiple entry types. Direct, indirect, and file can now be
combined in the signatures file using commas.

diffstat:

 sys/sys/verified_exec.h |  10 +++++-----
 1 files changed, 5 insertions(+), 5 deletions(-)

diffs (31 lines):

diff -r fd75da8873b6 -r a09ff8b24841 sys/sys/verified_exec.h
--- a/sys/sys/verified_exec.h   Fri Aug 12 06:45:39 2005 +0000
+++ b/sys/sys/verified_exec.h   Fri Aug 12 06:45:42 2005 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: verified_exec.h,v 1.6.2.7 2005/07/02 15:58:17 tron Exp $       */
+/*     $NetBSD: verified_exec.h,v 1.6.2.8 2005/08/12 06:45:42 snj Exp $        */
 
 /*-
  * Copyright 2005 Elad Efrat <elad%bsd.org.il@localhost>
@@ -41,7 +41,7 @@
 #include <sys/param.h>
 #include <sys/hash.h>
 
-__KERNEL_RCSID(0, "$NetBSD: verified_exec.h,v 1.6.2.7 2005/07/02 15:58:17 tron Exp $");
+__KERNEL_RCSID(0, "$NetBSD: verified_exec.h,v 1.6.2.8 2005/08/12 06:45:42 snj Exp $");
 
 /* Max length of the fingerprint type string, including terminating \0 char */
 #define VERIEXEC_TYPE_MAXLEN 9
@@ -63,9 +63,9 @@
  * Types of veriexec inodes we can have. Ordered from less strict to
  * most strict -- this is enforced if a duplicate entry is loaded.
  */
-#define VERIEXEC_DIRECT                0 /* Allow direct execution */
-#define VERIEXEC_INDIRECT      1 /* Only allow indirect execution */
-#define VERIEXEC_FILE          2 /* Fingerprint of a plain file */
+#define VERIEXEC_DIRECT                0x01 /* Direct execution (exec) */
+#define VERIEXEC_INDIRECT      0x02 /* Indirect execution (#!) */
+#define VERIEXEC_FILE          0x04 /* Plain file (open) */
 
 #define VERIEXEC_LOAD _IOW('S', 0x1, struct veriexec_params)
 #define VERIEXEC_TABLESIZE _IOW('S', 0x2, struct veriexec_sizing_params)