VERIEXEC_STATE_LOCKED
state |= VERIEXEC_STATE_LOCKED;
mac_veriexec_set_state(VERIEXEC_STATE_LOCKED);
if (mac_veriexec_in_state(VERIEXEC_STATE_LOCKED))
if (mac_veriexec_state & VERIEXEC_STATE_LOCKED)
VERIEXEC_STATE_LOCKED | VERIEXEC_STATE_ENFORCE);