en Copyright 2015 Java http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/veriexec/Makefile#031beb4e sys: Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd-14.2/sys/modules/veriexec/Makefile Wed, 16 Aug 2023 17:54:58 +0000 Warner Losh <imp@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/sys/modules/veriexec/Makefile#ed7b25da Device for user space to interface with MAC/veriexec.The veriexec device features the following ioctl commands:VERIEXEC_ACTIVE Activate veriexec functionalityVERIEXEC_DEBUG_ON Enable debugging mode and increment or set the debug levelVERIEXEC_DEBUG_OFF Disable debugging modeVERIEXEC_ENFORCE Enforce veriexec fingerprinting (and acitvate if not already)VERIEXEC_GETSTATE Get current veriexec stateVERIEXEC_LOCK Lock changes to veriexec meta-data storeVERIEXEC_LOAD Load veriexec fingerprint if secure level is not raised (and passes the checks for VERIEXEC_SIGNED_LOAD)VERIEXEC_SIGNED_LOAD Load veriexec fingerprints from loader that supports signed manifest (and thus we can be more lenient about secure level being raised.) Fingerprints can be loaded if the meta-data store is not locked. Also securelevel must not have been raised or some fingerprints must have already been loaded, otherwise it would be dangerous to allow loading. (Note: this assumes that the fingerprints in the meta-data store at least cover the fingerprint loader.)Reviewed by: jtlObtained from: Juniper Networks, Inc.Differential Revision: https://reviews.freebsd.org/D8561 List of files: /freebsd-14.2/sys/modules/veriexec/Makefile Wed, 20 Jun 2018 00:48:46 +0000 Stephen J. Kiernan <stevek@FreeBSD.org>