#!/bin/sh
# DF-4773 mode 2 — unprivileged hammer loop: continuously read the sensor
# oid while root kldunloads the module (== kldunload apple_smc).  The
# in-flight handler is not drained (kern_sysctl.c:391 dead code), so it
# keeps executing while the module text is unmapped.
while :; do
	sysctl -n kern.df4773_sensor0 >/dev/null 2>&1 || exit 0
done