YAMAMOTO Takashi wrote:
>> while this problem will remain correct at all times (we can't really
>> cover up on all 3rd-party driver flaws), sysdisk(9) let's you do
>> something about it: it gives you a chance to maintain the raw disk
>> access policy regardless of the driver code. it shifts the security
>> policy enforcement back to netbsd.
>>
>> -e.
> 
> if you want to remove partition handling code from
> each disk drivers as far as possible and have a single unified
> mechanism instead, i agree it's a good idea, and it's
> one of the goals of wedges, iirc.
> 
> YAMAMOTO Takashi

can you elaborate on the state of wedges and if 3rd-party drivers have
to make use of them, etc.?

-e.