man/man2/memfd_secret.2: Update default state
PATCH v2 1/1 man/man2/memfd_secret.2: Update default state
In commit b758fe6df50 ("mm/secretmem: make it on by default"), memfd_secret was updated to be enabled by default.
---
Changes since v1:
- Move the paragraph to the HISTORY section.
- Drop reference to the performance concern.
- Follow semantic newlines rule.
man/man2/memfd_secret.2 | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-)
man/man2/memfd_secret.2 +7 -7
@@ -136,6 +136,13 @@ or has not been enabled on the kernel command-line with Linux. .SH HISTORY Linux 5.14. +.P +Before Linux 6.5, +.\" commit b758fe6df50daf68fef089d8f3c1cd49fc794ed2 +.BR memfd_secret () +was disabled by default and only available if the system +administrator turned it on using "secretmem.enable=y" kernel +parameter. .SH NOTES The .BR memfd_secret ()
@@ -182,13 +189,6 @@ or spawn a new privileged user-space process to perform secrets exfiltration using .BR ptrace (2). .P -The way -.BR memfd_secret () -allocates and locks the memory may impact overall system performance, -therefore the system call is disabled by default and only available -if the system administrator turned it on using -"secretmem.enable=y" kernel parameter. -.P To prevent potential data leaks of memory regions backed by .BR memfd_secret () from a hybernation image,
Signature · 1 line
2.49.0.850.g28803427d3-goog
Alejandro Colomar
maintainerHi
Quoted 4 lines · Thiébaud Weksteen
In commit
b758fe6df50("mm/secretmem: make it on by default"),memfd_secretwas updated to be enabled by default.Signed-off-by Thiébaud Weksteen <[email protected]>
Thanks! I've applied the patch. I've amended with some tweaks to line breaks to reduce the diff:
diff --git c/man/man2/memfd_secret.2 w/man/man2/memfd_secret.2 index b3896b12d..30853d65b 100644
--- c/man/man2/memfd_secret.2
+++ w/man/man2/memfd_secret.2
@@ -140,9 +140,9 @@ .SH HISTORY
Before Linux 6.5,
.\" commit b758fe6df50daf68fef089d8f3c1cd49fc794ed2 .BR memfd_secret ()
-was disabled by default and only available if the system -administrator turned it on using "secretmem.enable=y" kernel -parameter.
+was disabled by default and only available
+if the system administrator turned it on using +"secretmem.enable=y" kernel parameter.
.SH NOTES
The
.BR memfd_secret ()
Have a lovely night!
Alex
Quoted 43 lines
---
Changes since v1:
- Move the paragraph to the HISTORY section.
- Drop reference to the performance concern.
- Follow semantic newlines rule.man/man2/memfd_secret.2 | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-)man/man2/memfd_secret.2 +7
-7@@ -136,6 +136,13 @@ or has not been enabled on the kernel command-line with Linux. .SH HISTORY Linux 5.14. +.P +Before Linux 6.5, +.\" commit b758fe6df50daf68fef089d8f3c1cd49fc794ed2 +.BR memfd_secret () +was disabled by default and only available if the system +administrator turned it on using "secretmem.enable=y" kernel +parameter. .SH NOTES The .BR memfd_secret ()@@ -182,13 +189,6 @@ or spawn a new privileged user-space process to perform secrets exfiltration using .BR ptrace (2). .P -The way -.BR memfd_secret () -allocates and locks the memory may impact overall system performance, -therefore the system call is disabled by default and only available -if the system administrator turned it on using -"secretmem.enable=y" kernel parameter. -.P To prevent potential data leaks of memory regions backed by .BR memfd_secret () from a hybernation image,Signature · 1 line
2.49.0.850.g28803427d3-goog
Signature · 1 line
<https://www.alejandro-colomar.es/>
Quoted 11 lines · Alejandro Colomar
Hi
Quoted 4 lines · Thiébaud Weksteen
In commit
b758fe6df50("mm/secretmem: make it on by default"),memfd_secretwas updated to be enabled by default.Signed-off-by Thiébaud Weksteen <[email protected]>Thanks! I've applied the patch. I've amended with some tweaks to line breaks to reduce the diff:
Great, thanks for the review!
Quoted 72 lines
diff --git c/man/man2/memfd_secret.2 w/man/man2/memfd_secret.2 index
b3896b12d..30853d65b100644
--- c/man/man2/memfd_secret.2
+++ w/man/man2/memfd_secret.2
@@ -140,9 +140,9 @@ .SH HISTORY
Before Linux 6.5,
.\" commitb758fe6df50daf68fef089d8f3c1cd49fc794ed2.BRmemfd_secret()
-was disabled by default and only available if the system -administrator turned it on using "secretmem.enable=y" kernel -parameter.
+was disabled by default and only available
+if the system administrator turned it on using +"secretmem.enable=y" kernel parameter.
.SH NOTES
The
.BRmemfd_secret()Have a lovely night!
AlexQuoted 41 lines
---
Changes since v1:
- Move the paragraph to the HISTORY section.
- Drop reference to the performance concern.
- Follow semantic newlines rule.man/man2/memfd_secret.2 | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-)man/man2/memfd_secret.2 +7
-8@@ -136,6 +136,13 @@ or has not been enabled on the kernel command-line with Linux. .SH HISTORY Linux 5.14. +.P +Before Linux 6.5, +.\" commit b758fe6df50daf68fef089d8f3c1cd49fc794ed2 +.BR memfd_secret () +was disabled by default and only available if the system +administrator turned it on using "secretmem.enable=y" kernel +parameter. .SH NOTES The .BR memfd_secret ()@@ -182,13 +189,6 @@ or spawn a new privileged user-space process to perform secrets exfiltration using .BR ptrace (2). .P -The way -.BR memfd_secret () -allocates and locks the memory may impact overall system performance, -therefore the system call is disabled by default and only available -if the system administrator turned it on using -"secretmem.enable=y" kernel parameter. -.P To prevent potential data leaks of memory regions backed by .BR memfd_secret () from a hybernation image, --Quoted 2 lines
2.49.0.850.g28803427d3-goog