Re: FWD: Re: Linux pipe question

From: Jakob Østergaard (jakob@unthought.net)
Date: Wed Sep 20 2000 - 12:29:06 EST


On Wed, Sep 20, 2000 at 12:31:25PM -0400, Mike Panetta wrote:
> Can anyone answer this?
> I am not sure if unnamed pipes in linux
> are pageable or not. If an unnamed pipe
> could be paged out what could be done
> to prevent that from happening?

The pipe itself is not pageable, but the user programs
will use buffers to actually use the pipe, and user programs
are of course pageable.

You might want to look into encrypted swap-space
or at least using mlock() to lock the user programs in
core. It depends on how secure you want it. Could someone
actually access the swap space (eg. steal the disk), or
could someone install compromised versions of the programs
unnoticed ?

Most programs just fill their buffers with random data or
zeroes, after they're done with the confidential data.

-- 
................................................................
:   jakob@unthought.net   : And I see the elder races,         :
:.........................: putrid forms of man                :
:   Jakob Østergaard      : See him rise and claim the earth,  :
:        OZ9ABN           : his downfall is at hand.           :
:.........................:............{Konkhra}...............:
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sat Sep 23 2000 - 21:00:23 EST