5888b16eef
New features:
- Add a veriexec_report() routine to make most reporting consistent and
remove some common code.
- Add 'strict' mode that controls how veriexec behaves.
- Add sysctl knobs:
o kern.veriexec.verbose controls verbosity levels. Value: 0, 1.
o kern.veriexec.strict controls strict level. Values: 0, 1, 2. See
documentation in sysctl(3) for details.
o kern.veriexec.algorithms returns a string with a space separated
list of supported hashing algorithms in veriexec.
- Updated documentation in man pages for sysctl(3) and sysctl(8).
Bug fixes:
- veriexec_removechk(): Code cleanup + handle FINGERPRINT_NOTEVAL
correctly.
- exec_script(): Don't pass 0 as flag when executing a script; use the
defined VERIEXEC_INDIRECT - which is 1. Makes indirect execution
enforcement work.
- Fix some printing formats and types..
|
||
|---|---|---|
| .. | ||
| aoutm68k | ||
| common | ||
| darwin | ||
| freebsd | ||
| hpux | ||
| ibcs2 | ||
| irix | ||
| linux | ||
| m68k4k | ||
| mach | ||
| netbsd32 | ||
| osf1 | ||
| ossaudio | ||
| pecoff | ||
| sunos | ||
| sunos32 | ||
| svr4 | ||
| svr4_32 | ||
| ultrix | ||
| vax1k | ||
| Makefile | ||