> YAMAMOTO Takashi wrote:
> >> for the record, I didn't expect these ugly #ifdefs to remain too long;
> >> the goal is to eventually have it all replaced by kauth(9) listeners.
> > 
> > does it apply to NVERIEXEC, too?
> > if so, what's your plan about vn_open?
> 
> as blymn@ knows, I've wanted to refactor the veriexec code in vn_open
> for quite some time so it can be later, again, factored out to its own
> kauth(9) listener.
> 
> -e.

sorry for not being clear,
my question was about the copying of pathname for logging,
which i don't think can be solved by kauth.

YAMAMOTO Takashi