Thanks kevin i missed the dump part... agree with disable dump on prod ..enable on dev
On 8 Feb 2018 22:51, "Kevin Chadwick" <m8il1i...@gmail.com> wrote: > On Thu, 8 Feb 2018 19:39:39 +0000 > > > > Afaik swap is encrypted anyway on OpenBSD > > It is with a random key which is actually more secure than the softraid > key. > > However to the OPS question relating to dumps. > > I believe the answer is that dumps are helpful and OpenBSD is a > developer system primarily but you should disable them with sysctl for > production or if you have concerns. > >