--- kern_vexec.c.orig	Sat Dec 25 17:01:18 2004
+++ kern_vexec.c	Sat Dec 25 17:04:17 2004
@@ -259,7 +259,9 @@ int vexec_verify(struct proc *p, struct 
 			 * only for TPE, which is why we're not
 			 * modifying the fingerprint status.
 			 */
-			if (!trusted(p) && (flag == VEXEC_INDIRECT)) {
+			if (!trusted(p) &&
+			    (vhe->vhe_type == VEXEC_INDIRECT) &&
+			    (flag != VEXEC_INDIRECT)) {
 				printf("vexec_verify: Attempt to "
 				    "execute %s directly: Enforcing "
 				    "correct type. (uid=%u, pid=%u, "