good move using machdep.booted_file. one minor nit: + /* This call shouldn't fail, but use a default just in case.*/ + if (sysctlbyname(BOOTFILE, bootfile, &len, NULL, 0) != 0)
this comment isn't really true. it can fail for various reasons including that the machdep code doesn't know or support this option.. .mrg.