Simon J. Gerraty 35bbdfad28 Pass severity to vectx_open() rather than vectx_close() ...

file_loadraw() can have a need to load unverified files
like "dtrace_dof".  Allow severity_guess() to look at the filename
but if it returns less than VE_MUST check that the type is not
one we insist on verifying.

In vectx_open if severity < VE_MUST we can allow it to be unverified.
If passed VE_GUESS we call severity_guess().
Regardless, we record severity in ctx so it is available to vectx_close().

Sponsored by: Hewlett Packard Enterprise Development LP

Reviewed by:	khng
Differential Revision:	https://reviews.freebsd.org/D56297

2026-04-10 10:46:54 -07:00

..

libsecureboot.h

…

verify_file.h

Pass severity to vectx_open() rather than vectx_close()

2026-04-10 10:46:54 -07:00