Subject: Re: veriexec (Re: CVS commit: src)
To: YAMAMOTO Takashi <yamt@mwd.biglobe.ne.jp>
From: Elad Efrat <elad@NetBSD.org>
List: tech-kern
Date: 09/30/2006 15:22:00
YAMAMOTO Takashi wrote:
>>>>> btw, what's the point to distinguish "indirect" from "direct"?
>>>> For this case or in general?
>>> in the design of veriexec.
>>>
>>> YAMAMOTO Takashi
>> Distinguish between programs you execute directly via exec and programs
>> that get executed "indirectly" as script interpreters or libraries that
>> mapped executable.
>
> my questions was, why do you want to distinguish them?
To control how programs are being accessed. Part of being a feature of
Veriexec that I know for a fact people are making use of, it also helps
to elegantly solve other problems in, say, TPE.
It's a good thing. :)
-e.
--
Elad Efrat