VEXECCTL(8)             OpenBSD System Manager's Manual            VEXECCTL(8)

NAME
     vexecctl - load Vexec fingerprints

SYNOPSIS
     vexecctl [-v] fingerprint_db

DESCRIPTION
     vexecctl loads the fingerprints in fingerprint_db to the kernel's finger-
     print table. Once loaded, the kernel can validate executed programs (or
     opened files) against the table, and report, or otherwise take action, on
     fingerprint mismatches.

     vexecctl can only load data when the machine is single-user.

     If the -v option is set vexecctl will go into verbose mode, providing
     more information on what it's doing. Otherwise, only errors will be
     printed (to stderr).

FILES
     /dev/vexec       The vexec pseudo-device, used to load fingerprint infor-
                      mation
     /etc/vexec.conf  Main fingerprint database

NOTES
     To get vexec support in your kernel, you need to include the vexec device
     in the kernel's config file. To do that, just add the following line to
     your kernel's MI, that is, /usr/src/sys/conf/KERNEL_NAME, config file:

           pseudo-device vexec

SEE ALSO
     vexec.conf(5), vexec(4), stephanie(7)

AUTHORS
     br1an <brian@ethernet.org> wrote and maintains Vexec and Stephanie for
     OpenBSD 3.6.

OpenBSD 3.6                     August 1, 2004                               1