Re: KAUTH_SYSTEM_UNENCRYPTED_SWAP

[Paul Goyette <paul%whooppee.com@localhost>]

I'm not sure I like the name!

Can you call it KAUTH_SYSTEM_DISABLE_SWAPENCRYPT ?  That more
closely describes the action which is being controlled.


On Sat, 16 May 2020, Alexander Nasonov wrote:

> Attached patch adds KAUTH_SYSTEM_UNENCRYPTED_SWAP and
> it forbids changing vm.swap_encrypt from 1 to 0 when
> securelevel > 0.
>
> If there are no objections, I'm going to commit it tomorrow.
>
> --
> Alex
>
>
> !DSPAM:5ec06ddb24841398742664!

+--------------------+--------------------------+-----------------------+
| Paul Goyette       | PGP Key fingerprint:     | E-mail addresses:     |
| (Retired)          | FA29 0E3B 35AF E8AE 6651 | paul%whooppee.com@localhost     |
| Software Developer | 0786 F758 55DE 53BA 7731 | pgoyette%netbsd.org@localhost   |
+--------------------+--------------------------+-----------------------+