I'm not sure I like the name! Can you call it KAUTH_SYSTEM_DISABLE_SWAPENCRYPT ? That more closely describes the action which is being controlled.
On Sat, 16 May 2020, Alexander Nasonov wrote:
Attached patch adds KAUTH_SYSTEM_UNENCRYPTED_SWAP and it forbids changing vm.swap_encrypt from 1 to 0 when securelevel > 0. If there are no objections, I'm going to commit it tomorrow. -- Alex !DSPAM:5ec06ddb24841398742664!
+--------------------+--------------------------+-----------------------+ | Paul Goyette | PGP Key fingerprint: | E-mail addresses: | | (Retired) | FA29 0E3B 35AF E8AE 6651 | p...@whooppee.com | | Software Developer | 0786 F758 55DE 53BA 7731 | pgoye...@netbsd.org | +--------------------+--------------------------+-----------------------+
