From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-la0-f51.google.com (mail-la0-f51.google.com [209.85.215.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by lists.ozlabs.org (Postfix) with ESMTPS id CE00E1A0736 for ; Fri, 26 Jun 2015 00:26:37 +1000 (AEST) Received: by lacny3 with SMTP id ny3so46002241lac.3 for ; Thu, 25 Jun 2015 07:26:34 -0700 (PDT) MIME-Version: 1.0 In-Reply-To: <20150625141638.GF2329@akamai.com> References: <1433942810-7852-1-git-send-email-emunson@akamai.com> <20150610145929.b22be8647887ea7091b09ae1@linux-foundation.org> <5579DFBA.80809@akamai.com> <20150611123424.4bb07cffd0e5bb146cc92231@linux-foundation.org> <557ACAFC.90608@suse.cz> <20150615144356.GB12300@akamai.com> <55895956.5020707@suse.cz> <20150625141638.GF2329@akamai.com> From: Andy Lutomirski Date: Thu, 25 Jun 2015 07:26:14 -0700 Message-ID: Subject: Re: [RESEND PATCH V2 0/3] Allow user to request memory to be locked on page fault To: Eric B Munson Cc: Vlastimil Babka , Andrew Morton , Shuah Khan , Michal Hocko , Michael Kerrisk , linux-alpha@vger.kernel.org, "linux-kernel@vger.kernel.org" , Linux MIPS Mailing List , linux-parisc@vger.kernel.org, linuxppc-dev@lists.ozlabs.org, sparclinux@vger.kernel.org, linux-xtensa@linux-xtensa.org, "linux-mm@kvack.org" , linux-arch , Linux API Content-Type: text/plain; charset=UTF-8 List-Id: Linux on PowerPC Developers Mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , On Thu, Jun 25, 2015 at 7:16 AM, Eric B Munson wrote: > On Tue, 23 Jun 2015, Vlastimil Babka wrote: > >> On 06/15/2015 04:43 PM, Eric B Munson wrote: >> >> >> >>If the new LOCKONFAULT functionality is indeed desired (I haven't >> >>still decided myself) then I agree that would be the cleanest way. >> > >> >Do you disagree with the use cases I have listed or do you think there >> >is a better way of addressing those cases? >> >> I'm somewhat sceptical about the security one. Are security >> sensitive buffers that large to matter? The performance one is more >> convincing and I don't see a better way, so OK. > > They can be, the two that come to mind are medical images and high > resolution sensor data. I think we've been handling sensitive memory pages wrong forever. We shouldn't lock them into memory; we should flag them as sensitive and encrypt them if they're ever written out to disk. --Andy