diff --git a/sys/kern/kern_verifiedexec.c b/sys/kern/kern_verifiedexec.c
index 0e2a200d278b..2e138683cac7 100644
--- a/sys/kern/kern_verifiedexec.c
+++ b/sys/kern/kern_verifiedexec.c
@@ -1,4 +1,4 @@
-/*	$NetBSD: kern_verifiedexec.c,v 1.24 2005/06/13 22:46:56 elad Exp $	*/
+/*	$NetBSD: kern_verifiedexec.c,v 1.25 2005/06/14 21:55:21 elad Exp $	*/
 
 /*-
  * Copyright 2005 Elad Efrat <elad@bsd.org.il>
@@ -30,7 +30,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: kern_verifiedexec.c,v 1.24 2005/06/13 22:46:56 elad Exp $");
+__KERNEL_RCSID(0, "$NetBSD: kern_verifiedexec.c,v 1.25 2005/06/14 21:55:21 elad Exp $");
 
 #include <sys/param.h>
 #include <sys/mount.h>
@@ -469,9 +469,10 @@ out:
 		 *   - File is being accessed, and we're in strict
 		 *     level 2.
 		 */
-		if ((veriexec_strict > 1) ||
-		    ((veriexec_strict == 1) &&
-		    ((flag == VERIEXEC_FILE) || (flag == VERIEXEC_INDIRECT))))
+		if (((veriexec_strict == 1) &&
+		    ((flag == VERIEXEC_DIRECT) ||
+		     (flag == VERIEXEC_INDIRECT))) ||
+		    (veriexec_strict > 1))
 			error = EPERM;
 
 		break;