Writes to sysctls flagged with CTLFLAG_SECURE are blocked if the appropriate secure level is set. mac_veriexec does not behave this way, it blocks such sysctls in read-only mode as well.
This change aims to make mac_veriexec behave like secure levels, as it was meant by the original commit
|
||
---|---|---|
.. | ||
mac_veriexec_internal.h | ||
mac_veriexec_sha1.c | ||
mac_veriexec_sha256.c | ||
mac_veriexec_sha384.c | ||
mac_veriexec_sha512.c | ||
mac_veriexec.c | ||
mac_veriexec.h | ||
veriexec_fingerprint.c | ||
veriexec_metadata.c |