socsvn commit: r240108 - soc2012/gpf/pefs_kmod/sys/fs/pefs

[gpf at FreeBSD.org]

Author: gpf
Date: Sun Aug  5 16:28:34 2012
New Revision: 240108
URL: http://svnweb.FreeBSD.org/socsvn/?view=rev&rev=240108

Log:
  -declare sysctl var vfs.pefs.exec.enable that will be used for dbg purposes
  while coding immutable file execution control in sys/kern/kern_exec.c
  

Modified:
  soc2012/gpf/pefs_kmod/sys/fs/pefs/pefs_vfsops.c

Modified: soc2012/gpf/pefs_kmod/sys/fs/pefs/pefs_vfsops.c
==============================================================================
--- soc2012/gpf/pefs_kmod/sys/fs/pefs/pefs_vfsops.c	Sun Aug  5 15:55:36 2012	(r240107)
+++ soc2012/gpf/pefs_kmod/sys/fs/pefs/pefs_vfsops.c	Sun Aug  5 16:28:34 2012	(r240108)
@@ -44,6 +44,7 @@
 #include <sys/mount.h>
 #include <sys/namei.h>
 #include <sys/proc.h>
+#include <sys/sysctl.h>
 #include <sys/vnode.h>
 #include <sys/dirent.h>
 
@@ -618,6 +619,14 @@
 	.vfs_vget =		pefs_vget,
 };
 
+/* XXXgpf: declare our debugging sysctl for kern_exec.c */
+SYSCTL_NODE(_vfs_pefs, OID_AUTO, exec, CTLFLAG_RW, 0,
+	"PEFS kern_exec.c stuff");
+
+int		pefs_exec_enable = 0;
+SYSCTL_INT(_vfs_pefs_exec, OID_AUTO, enable, CTLFLAG_RW,
+	&pefs_exec_enable, 0, "Enable exec protection");
+
 VFS_SET(pefs_vfsops, pefs, VFCF_LOOPBACK);
 MODULE_DEPEND(pefs, crypto, 1, 1, 1);
 #ifdef PEFS_AESNI