On Wed, Jul 01, 2026 at 09:04:26PM +0200, Reinoud Zandijk wrote:
> 
> I've tested it using read/write on /dev/drum and tested it for swapping on
> amd64 using plain and encrypted forms. One point of discussion could be that
> writing to /dev/drum from userland could be allowed or not. In the current
> patch its allowed.

Both reading and writing on /dev/drum must be forbidden at securelevel > 0
or the entire security model falls apart.

Thor

Reply via email to