Date: Wed, 16 Apr 2003 15:20:57 -0700 From: =?unknown-8bit?Q?S=EAr=EAciya_Kurdistan=EE?= <sereciya@kurdistan.ath.cx> To: freebsd-performance@freebsd.org Subject: FreeBSD Memory Pages Not Locked? Message-ID: <20030416222057.GC57404@kurdistan.ath.cx>
next in thread | raw e-mail | index | archive | help
--CblX+4bnyfN0pR09 Content-Type: text/plain; charset=unknown-8bit Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hello, I recently installed "gpnupg" from the ports collection and upon running it (after the key generation), I found myself seeing the following error: gpg: Warning: using insecure memory! ... Those of you who are impatient and think that this is a gpg &| port specific problem, please be patient and read on ... from: http://www.gnupg.org/documentation/faqs.html#q6.1 Here's what the GPG FAQ says:=20 "6.1) Why do I get "gpg: Warning: using insecure memory!" On many systems this program should be installed as setuid(root). This is necessary to lock memory pages. Locking memory pages prevents the operating system from writing them to disk and thereby keeping your secret keys really secret. If you get no warning message about insecure memory your operating system supports locking without being root. The program drops root privileges as soon as locked memory is allocated." So my question is: does FreeBSD really not have support for locking memory pages? if this is true, then what is the reason that this has not yet been implemented, is this not an important security feature? otherwise... if FreeBSD does in fact have support for locking memory pages, then why am I getting this error message? If any of you have encountered this problem, and would like to offer some help &| advice, you have a captive audience of at least one, me! Thanks in advance, --$=EAr=EAciya Kurdistan=EE +--------------------------------------------------------------+ | Welat xwe ava nake, dest bidin hevdu, pist nedin tu dijmin=EE | | Riya azadiy=EA ne h=EAsan e, h=EAviya xwe bernedin, dema me | | n=EAz=EEk e. | | | | Hevalt=EE bi kes=EAn du r=FB nekin, hevalt=EE bi hevdu ra bikin | | Ne ji hevaltiya wan kes=EAn p=EAxwas =FB r=FB dir=EAj, ne bi wan | | kes=EAn xw=EEnperest, ne j=EE ji y=EAn din. | | | | -$=EAr=EAciya Kurdistan=EE | +--------------------------------------------------------------+ translation provided on request: sereciya at kurdistan.ath.cx --CblX+4bnyfN0pR09 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD8DBQE+nddJ2rX+NTHoe2QRAj3UAKCY2ucSxuMUWwF15CxOw4LLCQRAvACeL+qo loWcvlLzmlsTy6h3lzqsdo8= =badu -----END PGP SIGNATURE----- --CblX+4bnyfN0pR09--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030416222057.GC57404>