Summary: | LOADER_VERIEXEC_VECTX knob lacks a description | ||
---|---|---|---|
Product: | Base System | Reporter: | Ed Maste <emaste> |
Component: | misc | Assignee: | Brooks Davis <brooks> |
Status: | Closed FIXED | ||
Severity: | Affects Only Me | CC: | brooks, sjg |
Priority: | --- | ||
Version: | CURRENT | ||
Hardware: | Any | ||
OS: | Any |
Description
Ed Maste
2023-03-07 20:58:37 UTC
Here's what I've got locally: +Enable building +.Xr loader 8 +with support effiently verify modules with vectx. +.Pp +Depends on +.Va WITH_LOADER_VERIEXEC . Sorry about that. The purpose of WITH_LOADER_VERIEXEC_VECTX is to enable hashing (thus verifying) kernel and modules as a side effect of loading. This avoids the double I/O of the simple method used for non-modules which tend to be much smaller. A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=3ac71149badeb1d3a0eeaa83739f7b385c8c941e commit 3ac71149badeb1d3a0eeaa83739f7b385c8c941e Author: Brooks Davis <brooks@FreeBSD.org> AuthorDate: 2023-03-09 21:39:41 +0000 Commit: Brooks Davis <brooks@FreeBSD.org> CommitDate: 2023-03-09 21:39:41 +0000 Add WITH_LOADER_VERIEXEC_VECTX description PR: 270017 Reviewed by: emaste Sponsored by: DARPA Differential Revision: https://reviews.freebsd.org/D39002 share/man/man5/src.conf.5 | 8 ++++++++ tools/build/options/WITH_LOADER_VERIEXEC_VECTX (new) | 7 +++++++ 2 files changed, 15 insertions(+) ^Triage: committed back in 2023. |