Module Name:	src
Committed By:	elad
Date:		Sat Dec 30 15:26:55 UTC 2006

Modified Files:
	src/sys/kern: kern_verifiedexec.c vfs_vnops.c
	src/sys/sys: verified_exec.h

Log Message:
Avoid TOCTOU in Veriexec by introducing veriexec_openchk() to enforce
the policy and using a single namei() call in vn_open().


To generate a diff of this commit:
cvs rdiff -r1.87 -r1.88 src/sys/kern/kern_verifiedexec.c
cvs rdiff -r1.129 -r1.130 src/sys/kern/vfs_vnops.c
cvs rdiff -r1.47 -r1.48 src/sys/sys/verified_exec.h

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.