Thanks kevin i missed the dump part... agree with disable dump on prod
..enable on dev

On 8 Feb 2018 22:51, "Kevin Chadwick" <m8il1i...@gmail.com> wrote:

> On Thu, 8 Feb 2018 19:39:39 +0000
>
>
> > Afaik swap is encrypted anyway on OpenBSD
>
> It is with a random key which is actually more secure than the softraid
> key.
>
> However to the OPS question relating to dumps.
>
> I believe the answer is that dumps are helpful and OpenBSD is a
> developer system primarily but you should disable them with sysctl for
> production or if you have concerns.
>
>

Reply via email to