Stephen J. Kiernan ed7b25da78 Device for user space to interface with MAC/veriexec.
The veriexec device features the following ioctl commands:

VERIEXEC_ACTIVE
  Activate veriexec functionality
VERIEXEC_DEBUG_ON
  Enable debugging mode and increment or set the debug level
VERIEXEC_DEBUG_OFF
  Disable debugging mode
VERIEXEC_ENFORCE
  Enforce veriexec fingerprinting (and acitvate if not already)
VERIEXEC_GETSTATE
  Get current veriexec state
VERIEXEC_LOCK
  Lock changes to veriexec meta-data store
VERIEXEC_LOAD
  Load veriexec fingerprint if secure level is not raised (and passes the
  checks for VERIEXEC_SIGNED_LOAD)
VERIEXEC_SIGNED_LOAD
  Load veriexec fingerprints from loader that supports signed manifest
  (and thus we can be more lenient about secure level being raised.)
  Fingerprints can be loaded if the meta-data store is not locked. Also
  securelevel must not have been raised or some fingerprints must have
  already been loaded, otherwise it would be dangerous to allow loading.
  (Note: this assumes that the fingerprints in the meta-data store at
         least cover the fingerprint loader.)

Reviewed by:	jtl
Obtained from:	Juniper Networks, Inc.
Differential Revision:	https://reviews.freebsd.org/D8561
2018-06-20 00:48:46 +00:00
..
2018-05-24 17:06:00 +00:00
2018-01-12 12:14:14 +00:00
2018-04-07 19:29:19 +00:00
2018-05-03 19:45:48 +00:00
2017-12-30 11:42:49 +00:00
2018-01-26 06:21:24 +00:00
2018-01-07 20:28:17 +00:00
2018-03-16 02:46:08 +00:00
2017-04-03 03:07:48 +00:00
2017-05-18 06:13:29 +00:00
2017-12-20 18:15:06 +00:00
2018-06-18 20:12:54 +00:00
2018-06-18 20:12:54 +00:00
2017-12-20 18:15:06 +00:00
2017-06-26 21:14:33 +00:00
2017-11-21 09:08:27 +00:00
2017-11-13 10:49:18 +00:00
2017-06-09 12:06:22 +00:00
2017-08-21 20:27:45 +00:00
2018-06-14 06:40:59 +00:00
2018-01-12 12:14:14 +00:00
2018-01-12 12:14:14 +00:00
2017-05-09 05:22:51 +00:00
2018-05-25 17:29:29 +00:00
2017-12-05 17:23:33 +00:00
2017-01-28 02:22:15 +00:00