Re: KAUTH_SYSTEM_UNENCRYPTED_SWAP

2020-05-16 Thread Greg Troxel
Kamil Rytarowski writes: > Is it possible to avoid negation in the name? > > KAUTH_SYSTEM_ENABLE_SWAP_ENCRYPTION I think the point is to have one permission to enable it, which is perhaps just regular root, and another to disable it if securelevel is elevated. So perhaps there should be two nam

Re: KAUTH_SYSTEM_UNENCRYPTED_SWAP

2020-05-16 Thread Kamil Rytarowski
Is it possible to avoid negation in the name? KAUTH_SYSTEM_ENABLE_SWAP_ENCRYPTION On 17.05.2020 00:51, Paul Goyette wrote: > I'm not sure I like the name! > > Can you call it KAUTH_SYSTEM_DISABLE_SWAPENCRYPT ?  That more > closely describes the action which is being controlled. > > > On Sat, 1

Re: KAUTH_SYSTEM_UNENCRYPTED_SWAP

2020-05-16 Thread Alexander Nasonov
m...@netbsd.org wrote: > No objections from me, but I feel like "will commit unless objected" > should be done on longer time scales. I spend way too much time on > netbsd and I still have some days I dont get to reading email for > whatever reason. It's a small change, we discussed it on source-c

Re: KAUTH_SYSTEM_UNENCRYPTED_SWAP

2020-05-16 Thread maya
On Sat, May 16, 2020 at 11:53:02PM +0100, Alexander Nasonov wrote: > Attached patch adds KAUTH_SYSTEM_UNENCRYPTED_SWAP and > it forbids changing vm.swap_encrypt from 1 to 0 when > securelevel > 0. > > If there are no objections, I'm going to commit it tomorrow. No objections from me, but I feel l

Re: KAUTH_SYSTEM_UNENCRYPTED_SWAP

2020-05-16 Thread Paul Goyette
I'm not sure I like the name! Can you call it KAUTH_SYSTEM_DISABLE_SWAPENCRYPT ? That more closely describes the action which is being controlled. On Sat, 16 May 2020, Alexander Nasonov wrote: Attached patch adds KAUTH_SYSTEM_UNENCRYPTED_SWAP and it forbids changing vm.swap_encrypt from 1 to

KAUTH_SYSTEM_UNENCRYPTED_SWAP

2020-05-16 Thread Alexander Nasonov
Attached patch adds KAUTH_SYSTEM_UNENCRYPTED_SWAP and it forbids changing vm.swap_encrypt from 1 to 0 when securelevel > 0. If there are no objections, I'm going to commit it tomorrow. -- Alex Index: share/man/man9/kauth.9 === RCS f

Re: vmspace refcnt refactor patch

2020-05-16 Thread Kamil Rytarowski
On 16.05.2020 18:52, Nick Hudson wrote: > > On 16/05/2020 12:45, Kamil Rytarowski wrote: >> On 16.05.2020 07:48, Nick Hudson wrote: >>> On 15/05/2020 17:35, Kamil Rytarowski wrote: I propose the following patch: http://netbsd.org/~kamil/patch-00253-refactor-vmspace-refcnt.txt >

Re: vmspace refcnt refactor patch

2020-05-16 Thread Nick Hudson
On 16/05/2020 12:45, Kamil Rytarowski wrote: On 16.05.2020 07:48, Nick Hudson wrote: On 15/05/2020 17:35, Kamil Rytarowski wrote: I propose the following patch: http://netbsd.org/~kamil/patch-00253-refactor-vmspace-refcnt.txt Does it look good? Nick, does it fix the hppa locking problem?

Re: uvm object page remove question

2020-05-16 Thread Manuel Bouyer
On Sat, May 16, 2020 at 05:24:32AM -0700, Chuck Silvers wrote: > On Wed, May 13, 2020 at 08:20:15PM +0200, Manuel Bouyer wrote: > > Hello, > > for Xen I need some non-standard VM operation: the tools want to map > > some Xen objects for which we don't have a physical address. > > The map/unmap oper

Re: uvm object page remove question

2020-05-16 Thread Chuck Silvers
On Wed, May 13, 2020 at 08:20:15PM +0200, Manuel Bouyer wrote: > Hello, > for Xen I need some non-standard VM operation: the tools want to map > some Xen objects for which we don't have a physical address. > The map/unmap operations are done with hypercalls which does the > page table update. In my

Re: vmspace refcnt refactor patch

2020-05-16 Thread Kamil Rytarowski
On 16.05.2020 07:48, Nick Hudson wrote: > On 15/05/2020 17:35, Kamil Rytarowski wrote: >> I propose the following patch: >> >> http://netbsd.org/~kamil/patch-00253-refactor-vmspace-refcnt.txt >> >> Does it look good? >> >> Nick, does it fix the hppa locking problem? >> > > Thanks for working on th