On Wed, Aug 02, 2023 at 07:47:48AM +0000, Taylor R Campbell wrote: > veriexec(4), and the fileassoc(9) API it uses internally, needs > maintenance and probably some serious rework to fix synchronization > problems on any MP and/or preemptible kernels (i.e., all x86 of the > past couple decades) with implications for any security properties it > is supposed to provide. > > If anyone cares about veriexec(4) and would like to volunteer to take > this on, we can discuss what needs to be done and how to proceed. >
I will take this on since I was originally responsible for the mess. It does play fast and loose with synchronisation and should be fixed. I have some fixes in my private tree that went some way to addressing the issues but they have been languishing for many many years because I had an issue of a deadlock that would occaisionally occur. At the time I couldn't work out where the deadlock was coming from but maybe with some expert help and the improved tools I can nut it out. -- Brett Lymn -- Sent from my NetBSD device. "We are were wolves", "You mean werewolves?", "No we were wolves, now we are something else entirely", "Oh"
