From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.6 required=3.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0FDFEC433E6 for ; Mon, 15 Feb 2021 19:20:53 +0000 (UTC) Received: from ml01.01.org (ml01.01.org [198.145.21.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id B784D64E13 for ; Mon, 15 Feb 2021 19:20:52 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org B784D64E13 Authentication-Results: mail.kernel.org; dmarc=fail (p=quarantine dis=none) header.from=suse.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-nvdimm-bounces@lists.01.org Received: from ml01.vlan13.01.org (localhost [IPv6:::1]) by ml01.01.org (Postfix) with ESMTP id 93DD0100ED487; Mon, 15 Feb 2021 11:20:52 -0800 (PST) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=195.135.220.15; helo=mx2.suse.de; envelope-from=mhocko@suse.com; receiver= Received: from mx2.suse.de (mx2.suse.de [195.135.220.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id F1A21100EF265 for ; Mon, 15 Feb 2021 11:20:49 -0800 (PST) X-Virus-Scanned: by amavisd-new at test-mx.suse.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=suse.com; s=susede1; t=1613416848; h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc: mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=35iSk0+5UfxNhbQoMoqK8Z0u+AvwuK5VeLDZ0BFtGgc=; b=LxudusPDnEIzx32bpsNd8eGk9aEHEp8nORbgbhfo9m/WaYQJNvskWIV49SwUk+3e+wUm6W bvkuJfdiurilR7t9l+AqCl48/0xWlWnh1jxDaWj32SfJk9fDbkh0PhlICshQRWBYaiM9H0 Cssa+KhpPwQxypJN/O8+L/ThpHbYF+4= Received: from relay2.suse.de (unknown [195.135.221.27]) by mx2.suse.de (Postfix) with ESMTP id C9B2BAC32; Mon, 15 Feb 2021 19:20:47 +0000 (UTC) Date: Mon, 15 Feb 2021 20:20:45 +0100 From: Michal Hocko To: James Bottomley Subject: Re: [PATCH v17 07/10] mm: introduce memfd_secret system call to create "secret" memory areas Message-ID: References: <20210214091954.GM242749@kernel.org> <052DACE9-986B-424C-AF8E-D6A4277DE635@redhat.com> <244f86cba227fa49ca30cd595c4e5538fe2f7c2b.camel@linux.ibm.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: Message-ID-Hash: BGR2LYXYPLYLBYVPKLKAD5QLJ4DDK32D X-Message-ID-Hash: BGR2LYXYPLYLBYVPKLKAD5QLJ4DDK32D X-MailFrom: mhocko@suse.com X-Mailman-Rule-Hits: nonmember-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation CC: David Hildenbrand , Mike Rapoport , Mike Rapoport , Andrew Morton , Alexander Viro , Andy Lutomirski , Arnd Bergmann , Borislav Petkov , Catalin Marinas , Christopher Lameter , Dave Hansen , Elena Reshetova , "H. Peter Anvin" , Ingo Molnar , "Kirill A. Shutemov" , Matthew Wilcox , Mark Rutland , Michael Kerrisk , Palmer Dabbelt , Paul Walmsley , Peter Zijlstra , Rick Edgecombe , Roman Gushchin , Shakeel Butt , Shuah Khan , Thomas Gleixner , Tycho Ander sen , Will Deacon , linux-api@vger.kernel.org, linux-arch@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-fsdevel@vger.kernel.org, linux-mm@kvack.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, linux-nvdimm@lists.01.org, linux-riscv@lists.infradead.org, x86@kernel.org, Hagen Paul Pfeifer , Palmer Dabbelt X-Mailman-Version: 3.1.1 Precedence: list List-Id: "Linux-nvdimm developer list." Archived-At: List-Archive: List-Help: List-Post: List-Subscribe: List-Unsubscribe: Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 T24gTW9uIDE1LTAyLTIxIDEwOjE0OjQzLCBKYW1lcyBCb3R0b21sZXkgd3JvdGU6DQo+IE9uIE1v biwgMjAyMS0wMi0xNSBhdCAxMDoxMyArMDEwMCwgTWljaGFsIEhvY2tvIHdyb3RlOg0KPiA+IE9u IFN1biAxNC0wMi0yMSAxMToyMTowMiwgSmFtZXMgQm90dG9tbGV5IHdyb3RlOg0KPiA+ID4gT24g U3VuLCAyMDIxLTAyLTE0IGF0IDEwOjU4ICswMTAwLCBEYXZpZCBIaWxkZW5icmFuZCB3cm90ZToN Cj4gPiA+IFsuLi5dDQo+ID4gPiA+ID4gQW5kIGhlcmUgd2UgY29tZSB0byB0aGUgcXVlc3Rpb24g IndoYXQgYXJlIHRoZSBkaWZmZXJlbmNlcyB0aGF0DQo+ID4gPiA+ID4ganVzdGlmeSBhIG5ldyBz eXN0ZW0gY2FsbD8iIGFuZCB0aGUgYW5zd2VyIHRvIHRoaXMgaXMgdmVyeQ0KPiA+ID4gPiA+IHN1 YmplY3RpdmUuIEFuZCBhcyBzdWNoIHdlIGNhbiBjb250aW51ZSBiaWtlc2hlZGRpbmcgZm9yZXZl ci4NCj4gPiA+ID4gDQo+ID4gPiA+IEkgdGhpbmsgdGhpcyBmaXRzIGludG8gdGhlIGV4aXN0aW5n IG1lbWZkX2NyZWF0ZSgpIHN5c2NhbGwganVzdA0KPiA+ID4gPiBmaW5lLCBhbmQgSSBoZWFyZCBu byBjb21wZWxsaW5nIGFyZ3VtZW50IHdoeSBpdCBzaG91bGRu4oCYdC4gVGhhdOKAmHMNCj4gPiA+ ID4gYWxsIEkgY2FuIHNheS4NCj4gPiA+IA0KPiA+ID4gT0ssIHNvIGxldCdzIHJldmlldyBoaXN0 b3J5LiAgSW4gdGhlIGZpcnN0IHR3byBpbmNhcm5hdGlvbnMgb2YgdGhlDQo+ID4gPiBwYXRjaCwg aXQgd2FzIGFuIGV4dGVuc2lvbiBvZiBtZW1mZF9jcmVhdGUoKS4gIFRoZSBzcGVjaWZpYw0KPiA+ ID4gb2JqZWN0aW9uIGJ5IEtpcmlsbCBTaHV0ZW1vdiB3YXMgdGhhdCBpdCBkb2Vzbid0IHNoYXJl IGFueSBjb2RlIGluDQo+ID4gPiBjb21tb24gd2l0aCBtZW1mZCBhbmQgc28gc2hvdWxkIGJlIGEg c2VwYXJhdGUgc3lzdGVtIGNhbGw6DQo+ID4gPiANCj4gPiA+IGh0dHBzOi8vbG9yZS5rZXJuZWwu b3JnL2xpbnV4LWFwaS8yMDIwMDcxMzEwNTgxMi5kbnd0ZGhzdXlqM3hiaDRmQGJveC8NCj4gPiAN Cj4gPiBUaGFua3MgZm9yIHRoZSBwb2ludGVyLiBCdXQgdGhpcyBhcmd1bWVudCBoYXNuJ3QgYmVl biBjaGFsbGVuZ2VkIGF0DQo+ID4gYWxsLiBJdCBoYXNuJ3QgYmVlbiBicm91Z2h0IHVwIHRoYXQg dGhlIG92ZXJsYXAgd291bGQgYmUgY29uc2lkZXJhYmxlDQo+ID4gaGlnaGVyIGJ5IHRoZSBodWdl dGxiL3NlYWxpbmcgc3VwcG9ydC4gQW5kIHNvIGZhciBub2JvZHkgaGFzIGNsYWltZWQNCj4gPiB0 aG9zZSBjb21iaW5hdGlvbnMgYXMgdW52aWFibGUuDQo+IA0KPiBLaXJpbGwgaXMgYWN0dWFsbHkg aW50ZXJlc3RlZCBpbiB0aGUgc2VhbGluZyBwYXRoIGZvciBoaXMgS1ZNIGNvZGUgc28NCj4gd2Ug dG9vayBhIGxvb2suICBUaGVyZSBtaWdodCBiZSBhIHR3byBsaW5lIG92ZXJsYXAgaW4gbWVtZmRf Y3JlYXRlIGZvcg0KPiB0aGUgc2VhbCBjYXNlLCBidXQgdGhlcmUncyBubyByZWFsIG92ZXJsYXAg aW4gbWVtZmRfYWRkX3NlYWxzIHdoaWNoIGlzDQo+IHRoZSBidWxrIG9mIHRoZSBjb2RlLiAgU28g dGhlIGJlc3Qgd2F5IHdvdWxkIHNlZW0gdG8gbGlmdCB0aGUgaW5vZGUgLi4uDQo+IC0+IHNlYWxz IGhlbHBlcnMgdG8gYmUgbm9uLXN0YXRpYyBzbyB0aGV5IGNhbiBiZSByZXVzZWQgYW5kIHJvbGwg b3VyDQo+IG93biBhZGRfc2VhbHMuDQoNClRoZXNlIGFyZSBpbXBsZW1lbnRhdGlvbiBkZXRhaWxz IHdoaWNoIGFyZSBub3QgcmVhbGx5IHJlbGV2YW50IHRvIHRoZQ0KQVBJIElNSE8uIA0KDQo+IEkg Y2FuJ3Qgc2VlIGEgdXNlIGNhc2UgYXQgYWxsIGZvciBodWdldGxiIHN1cHBvcnQsIHNvIGl0IHNl ZW1zIHRvIGJlIGENCj4gYml0IG9mIGFuIGFuZ2VscyBvbiBwaW4gaGVhZCBkaXNjdXNzaW9uLiAg SG93ZXZlciwgaWYgb25lIHdlcmUgdG8gY29tZQ0KPiBhbG9uZyBoYW5kbGluZyBpdCBpbiB0aGUg c2FtZSB3YXkgc2VlbXMgcmVhc29uYWJsZS4NCg0KVGhvc2UgYW5nZWxzIGhhdmUgbWFkZSB0aGVp ciB3YXkgdG8gbW1hcCwgU3lzdGVtIFYgc2htLCBtZW1mZF9jcmVhdGUgYW5kDQpvdGhlciBNTSBp bnRlcmZhY2VzIHdoaWNoIGhhdmUgbmV2ZXIgZW52aXNpb25lZCB3aGVuIGludHJvZHVjZWQuIEh1 Z2V0bGINCnBhZ2VzIHRvIGJhY2sgZ3Vlc3QgbWVtb3J5IGlzIHF1aXRlIGEgY29tbW9uIHVzZWNh c2Ugc28gd2h5IGRvIHlvdSB0aGluaw0KdGhvc2UgZ3Vlc3RzIHdvdWxkbid0IGxpa2UgdG8gc2Vl IHRoZWlyIG1lbW9yeSBiZSAic2VjcmV0Ij8NCg0KQXMgSSd2ZSBzYWlkIGluIG15IGxhc3QgcmVz cG9uc2UgKFlDWkVHdUxLOTRzektaRGZAZGhjcDIyLnN1c2UuY3opLCBJIGFtDQpub3QgZ29pbmcg dG8gYXJndWUgYWxsIHRoZXNlIGFnYWluLiBJIGhhdmUgbWFkZSBteSBwb2ludCBhbmQgeW91IGFy ZQ0KZnJlZSB0byB0YWtlIGl0IG9yIGxlYXZlIGl0Lg0KDQo+ID4gPiBUaGUgb3RoZXIgb2JqZWN0 aW9uIHJhaXNlZCBvZmZsaXN0IGlzIHRoYXQgaWYgd2UgZG8gdXNlDQo+ID4gPiBtZW1mZF9jcmVh dGUsIHRoZW4gd2UgaGF2ZSB0byBhZGQgYWxsIHRoZSBzZWNyZXQgbWVtb3J5IGZsYWdzIGFzIGFu DQo+ID4gPiBhZGRpdGlvbmFsIGlvY3RsLCB3aGVyZWFzIHRoZXkgY2FuIGJlIHNwZWNpZmllZCBv biBvcGVuIGlmIHdlIGRvIGENCj4gPiA+IHNlcGFyYXRlIHN5c3RlbSBjYWxsLiAgVGhlIGNvbnRh aW5lciBwZW9wbGUgdmlvbGVudGx5IG9iamVjdGVkIHRvDQo+ID4gPiB0aGUgaW9jdGwgYmVjYXVz ZSBpdCBjYW4ndCBiZSBwcm9wZXJseSBhbmFseXNlZCBieSBzZWNjb21wIGFuZCBtdWNoDQo+ID4g PiBwcmVmZXJyZWQgdGhlIHN5c2NhbGwgdmVyc2lvbi4NCj4gPiA+IA0KPiA+ID4gU2luY2Ugd2Un cmUgZHVtcGluZyB0aGUgdW5jYWNoZWQgdmFyaWFudCwgdGhlIGlvY3RsIHByb2JsZW0NCj4gPiA+ IGRpc2FwcGVhcnMgYnV0IHNvIGRvZXMgdGhlIHBvc3NpYmlsaXR5IG9mIGV2ZXIgYWRkaW5nIGl0 IGJhY2sgaWYgd2UNCj4gPiA+IHRha2Ugb24gdGhlIGNvbnRhaW5lciBwZW9wbGVzJyBvYmplY3Rp b24uICBUaGlzIGFyZ3VlcyBmb3IgYQ0KPiA+ID4gc2VwYXJhdGUgc3lzY2FsbCBiZWNhdXNlIHdl IGNhbiBhZGQgYWRkaXRpb25hbCBmZWF0dXJlcyBhbmQgZXh0ZW5kDQo+ID4gPiB0aGUgQVBJIHdp dGggZmxhZ3Mgd2l0aG91dCBjYXVzaW5nIGFudGktaW9jdGwgcmlvdHMuDQo+ID4gDQo+ID4gSSBh bSBzb3JyeSBidXQgSSBkbyBub3QgdW5kZXJzdGFuZCB0aGlzIGFyZ3VtZW50Lg0KPiANCj4gWW91 IGRvbid0IHVuZGVyc3RhbmQgd2h5IGNvbnRhaW5lciBndWFyZGluZyB0ZWNobm9sb2d5IGRvZXNu J3QgbGlrZQ0KPiBpb2N0bHM/DQoNCk5vLCBJIGRpZCBub3Qgc2VlIHdoZXJlIHRoZSBpb2N0bCBh cmd1bWVudCBjYW1lIGZyb20uDQoNClsuLi5dDQoNCj4gPiAgV2hhdCBraW5kIG9mIGZsYWdzIGFy ZSB3ZSB0YWxraW5nIGFib3V0IGFuZCB3aHkgd291bGQgdGhhdCBiZSBhDQo+ID4gcHJvYmxlbSB3 aXRoIG1lbWZkX2NyZWF0ZSBpbnRlcmZhY2U/IENvdWxkIHlvdSBiZSBtb3JlIHNwZWNpZmljDQo+ ID4gcGxlYXNlPw0KPiANCj4gWW91IG1lYW4gd2hhdCB3ZXJlIHRoZSBpb2N0bCBmbGFncyBpbiB0 aGUgcGF0Y2ggc2VyaWVzIGxpbmtlZCBhYm92ZT8gDQo+IFRoZXkgd2VyZSBTRUNSRVRNRU1fRVhD TFVTSVZFIGFuZCBTRUNSRVRNRU1fVU5DQUNIRUQgaW4gcGF0Y2ggMy81LiANCg0KT0sgSSBzZWUu IEhvdyBtYW55IHBvdGVudGlhbCBtb2RlcyBhcmUgd2UgdGFsa2luZyBhYm91dD8gQSBmZXcgb3IN CnBvdGVudGlhbGx5IG1hbnk/DQoNCj4gVGhleSB3ZXJlIGV2ZW50dWFsbHkgZHJvcHBlZCBhZnRl ciB2MTAsIGJlY2F1c2Ugb2YgcHJvYmxlbXMgd2l0aA0KPiBhcmNoaXRlY3R1cmFsIHNlbWFudGlj cywgd2l0aCB0aGUgaWRlYSB0aGF0IGl0IGNvdWxkIGJlIGFkZGVkIGJhY2sNCj4gYWdhaW4gaWYg YSBjb21wZWxsaW5nIG5lZWQgYXJvc2U6DQo+IA0KPiBodHRwczovL2xvcmUua2VybmVsLm9yZy9s aW51eC1hcGkvMjAyMDExMjMwOTU0MzIuNTg2MC0xLXJwcHRAa2VybmVsLm9yZy8NCj4gDQo+IElu IHRoZW9yeSB0aGUgZXh0cmEgZmxhZ3MgY291bGQgYmUgbXVsdGlwbGV4ZWQgaW50byB0aGUgbWVt ZmRfY3JlYXRlDQo+IGZsYWdzIGxpa2UgaHVnZXRsYmZzIGlzIGJ1dCB3aXRoIDMyIGZsYWdzIGFu ZCBhIGxvdCBhbHJlYWR5IHRha2VuIGl0DQo+IGdldHMgbWVzc3kgZm9yIGV4cGFuc2lvbi4gIFdo ZW4gd2UgcnVuIG91dCBvZiBmbGFncyB0aGUgZmlyc3QgcXVlc3Rpb24NCj4gcGVvcGxlIHdpbGwg YXNrIGlzICJ3aHkgZGlkbid0IHlvdSBkbyBzZXBhcmF0ZSBzeXN0ZW0gY2FsbHM/Ii4NCg0KT0ss IEkgZG8gbm90IG5lY2Vzc2FyaWx5IHNlZSBhIGxhY2sgb2YgZmxhZyBzcGFjZSBhIHByb2JsZW0u IEkgY2FuIGJlDQp3cm9uZyBoZXJlIGJ1dCBJIGRvIG5vdCBzZWUgaG93IHRoYXQgd291bGQgYmUg c29sdmVkIGJ5IGEgc2VwYXJhdGUNCnN5c2NhbGwgd2hlbiBpdCBzb3VuZHMgcmF0aGVyIGZvcnNl ZWFibGUgdGhhdCBtYW55IG1vZGVzIHN1cHBvcnRlZCBieQ0KbWVtZmRfY3JlYXRlIHdpbGwgZXZl bnR1YWxseSBmaW5kIHRoZWlyIHdheSB0byBhIHNlY3JldCBtZW1vcnkgYXMgd2VsbC4NCklmIGZv ciBubyBvdGhlciByZWFzb24sIHNlY3JldCBtZW1vcnkgaXMgbm90aGluZyByZWFsbHkgc3BlY2lh bC4gSXQgaXMNCmp1c3QgYSBtZW1vcnkgd2hpY2ggaXMgbm90IG1hcHBlZCB0byB0aGUga2VybmVs IHZpYSAxOjEgbWFwcGluZy4gVGhhdCdzDQppdC4gQW5kIHRoYXQgY2FuIGJlIGFwcGxpZWQgdG8g YW55IG1lbW9yeSBwcm92aWRlZCB0byB0aGUgdXNlcnNwYWNlLg0KDQpCdXQgSSBhbSByZXBlYXRp bmcgbXlzZWxmIGFnYWluIGhlcmUgc28gSSBiZXR0ZXIgc3RvcC4NCi0tIA0KTWljaGFsIEhvY2tv DQpTVVNFIExhYnMKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18KTGludXgtbnZkaW1tIG1haWxpbmcgbGlzdCAtLSBsaW51eC1udmRpbW1AbGlzdHMuMDEub3Jn ClRvIHVuc3Vic2NyaWJlIHNlbmQgYW4gZW1haWwgdG8gbGludXgtbnZkaW1tLWxlYXZlQGxpc3Rz LjAxLm9yZwo= From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-5.8 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id D0562C433DB for ; Mon, 15 Feb 2021 19:22:11 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 9646764D8F for ; Mon, 15 Feb 2021 19:22:11 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230459AbhBOTVy (ORCPT ); Mon, 15 Feb 2021 14:21:54 -0500 Received: from mx2.suse.de ([195.135.220.15]:49872 "EHLO mx2.suse.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229991AbhBOTVf (ORCPT ); Mon, 15 Feb 2021 14:21:35 -0500 X-Virus-Scanned: by amavisd-new at test-mx.suse.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=suse.com; s=susede1; t=1613416848; h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc: mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=35iSk0+5UfxNhbQoMoqK8Z0u+AvwuK5VeLDZ0BFtGgc=; b=LxudusPDnEIzx32bpsNd8eGk9aEHEp8nORbgbhfo9m/WaYQJNvskWIV49SwUk+3e+wUm6W bvkuJfdiurilR7t9l+AqCl48/0xWlWnh1jxDaWj32SfJk9fDbkh0PhlICshQRWBYaiM9H0 Cssa+KhpPwQxypJN/O8+L/ThpHbYF+4= Received: from relay2.suse.de (unknown [195.135.221.27]) by mx2.suse.de (Postfix) with ESMTP id C9B2BAC32; Mon, 15 Feb 2021 19:20:47 +0000 (UTC) Date: Mon, 15 Feb 2021 20:20:45 +0100 From: Michal Hocko To: James Bottomley Cc: David Hildenbrand , Mike Rapoport , Mike Rapoport , Andrew Morton , Alexander Viro , Andy Lutomirski , Arnd Bergmann , Borislav Petkov , Catalin Marinas , Christopher Lameter , Dan Williams , Dave Hansen , Elena Reshetova , "H. Peter Anvin" , Ingo Molnar , "Kirill A. Shutemov" , Matthew Wilcox , Mark Rutland , Michael Kerrisk , Palmer Dabbelt , Paul Walmsley , Peter Zijlstra , Rick Edgecombe , Roman Gushchin , Shakeel Butt , Shuah Khan , Thomas Gleixner , Tycho Andersen , Will Deacon , linux-api@vger.kernel.org, linux-arch@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-fsdevel@vger.kernel.org, linux-mm@kvack.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, linux-nvdimm@lists.01.org, linux-riscv@lists.infradead.org, x86@kernel.org, Hagen Paul Pfeifer , Palmer Dabbelt Subject: Re: [PATCH v17 07/10] mm: introduce memfd_secret system call to create "secret" memory areas Message-ID: References: <20210214091954.GM242749@kernel.org> <052DACE9-986B-424C-AF8E-D6A4277DE635@redhat.com> <244f86cba227fa49ca30cd595c4e5538fe2f7c2b.camel@linux.ibm.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon 15-02-21 10:14:43, James Bottomley wrote: > On Mon, 2021-02-15 at 10:13 +0100, Michal Hocko wrote: > > On Sun 14-02-21 11:21:02, James Bottomley wrote: > > > On Sun, 2021-02-14 at 10:58 +0100, David Hildenbrand wrote: > > > [...] > > > > > And here we come to the question "what are the differences that > > > > > justify a new system call?" and the answer to this is very > > > > > subjective. And as such we can continue bikeshedding forever. > > > > > > > > I think this fits into the existing memfd_create() syscall just > > > > fine, and I heard no compelling argument why it shouldn‘t. That‘s > > > > all I can say. > > > > > > OK, so let's review history. In the first two incarnations of the > > > patch, it was an extension of memfd_create(). The specific > > > objection by Kirill Shutemov was that it doesn't share any code in > > > common with memfd and so should be a separate system call: > > > > > > https://lore.kernel.org/linux-api/20200713105812.dnwtdhsuyj3xbh4f@box/ > > > > Thanks for the pointer. But this argument hasn't been challenged at > > all. It hasn't been brought up that the overlap would be considerable > > higher by the hugetlb/sealing support. And so far nobody has claimed > > those combinations as unviable. > > Kirill is actually interested in the sealing path for his KVM code so > we took a look. There might be a two line overlap in memfd_create for > the seal case, but there's no real overlap in memfd_add_seals which is > the bulk of the code. So the best way would seem to lift the inode ... > -> seals helpers to be non-static so they can be reused and roll our > own add_seals. These are implementation details which are not really relevant to the API IMHO. > I can't see a use case at all for hugetlb support, so it seems to be a > bit of an angels on pin head discussion. However, if one were to come > along handling it in the same way seems reasonable. Those angels have made their way to mmap, System V shm, memfd_create and other MM interfaces which have never envisioned when introduced. Hugetlb pages to back guest memory is quite a common usecase so why do you think those guests wouldn't like to see their memory be "secret"? As I've said in my last response (YCZEGuLK94szKZDf@dhcp22.suse.cz), I am not going to argue all these again. I have made my point and you are free to take it or leave it. > > > The other objection raised offlist is that if we do use > > > memfd_create, then we have to add all the secret memory flags as an > > > additional ioctl, whereas they can be specified on open if we do a > > > separate system call. The container people violently objected to > > > the ioctl because it can't be properly analysed by seccomp and much > > > preferred the syscall version. > > > > > > Since we're dumping the uncached variant, the ioctl problem > > > disappears but so does the possibility of ever adding it back if we > > > take on the container peoples' objection. This argues for a > > > separate syscall because we can add additional features and extend > > > the API with flags without causing anti-ioctl riots. > > > > I am sorry but I do not understand this argument. > > You don't understand why container guarding technology doesn't like > ioctls? No, I did not see where the ioctl argument came from. [...] > > What kind of flags are we talking about and why would that be a > > problem with memfd_create interface? Could you be more specific > > please? > > You mean what were the ioctl flags in the patch series linked above? > They were SECRETMEM_EXCLUSIVE and SECRETMEM_UNCACHED in patch 3/5. OK I see. How many potential modes are we talking about? A few or potentially many? > They were eventually dropped after v10, because of problems with > architectural semantics, with the idea that it could be added back > again if a compelling need arose: > > https://lore.kernel.org/linux-api/20201123095432.5860-1-rppt@kernel.org/ > > In theory the extra flags could be multiplexed into the memfd_create > flags like hugetlbfs is but with 32 flags and a lot already taken it > gets messy for expansion. When we run out of flags the first question > people will ask is "why didn't you do separate system calls?". OK, I do not necessarily see a lack of flag space a problem. I can be wrong here but I do not see how that would be solved by a separate syscall when it sounds rather forseeable that many modes supported by memfd_create will eventually find their way to a secret memory as well. If for no other reason, secret memory is nothing really special. It is just a memory which is not mapped to the kernel via 1:1 mapping. That's it. And that can be applied to any memory provided to the userspace. But I am repeating myself again here so I better stop. -- Michal Hocko SUSE Labs From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.8 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 5F6B9C433E0 for ; Mon, 15 Feb 2021 19:21:04 +0000 (UTC) Received: from merlin.infradead.org (merlin.infradead.org [205.233.59.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 1D5F564E13 for ; Mon, 15 Feb 2021 19:21:04 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 1D5F564E13 Authentication-Results: mail.kernel.org; dmarc=fail (p=quarantine dis=none) header.from=suse.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-riscv-bounces+linux-riscv=archiver.kernel.org@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=merlin.20170209; h=Sender:Content-Transfer-Encoding: Content-Type:Cc:List-Subscribe:List-Help:List-Post:List-Archive: List-Unsubscribe:List-Id:In-Reply-To:MIME-Version:References:Message-ID: Subject:To:From:Date:Reply-To:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=ChLk9eIFUX2CEZNh5X81Z+EcHH3FLA21y5c9AwCPqSY=; b=B2uVQjB+BDnbcubJ0Av5dw3II Bo5KrjcjYkpJm+fnVykqLEs3B4QMA2kRZeVZ/YBij+SHpN+rcZOdaGoNGSQtwX5eeQHWMyQkxR1jx Gc5mzAHYNv/ve0UDBV+ebPQLTIvKzhYODHJvJRYOwdlbXjuYPqmQo4dtAG/uJweWMf02ix8rfzd2I tLFQ5Vo/alM2EsQTd0UMHu2lSiP3YV2xn2vzwZbHPq2sKP19FMqiN/UxYMWk3eY8GfwV+t02+iupV 5Vq0MJpHTmQAw0KQEpXzstZpWD8RJqQI5+FrC/SOTrWfQU5rfvwZBNlaKuE57EwW7tmB0U0vWXzaF Gz36j5dcA==; Received: from localhost ([::1] helo=merlin.infradead.org) by merlin.infradead.org with esmtp (Exim 4.92.3 #3 (Red Hat Linux)) id 1lBjQV-0000Si-5G; Mon, 15 Feb 2021 19:20:55 +0000 Received: from mx2.suse.de ([195.135.220.15]) by merlin.infradead.org with esmtps (Exim 4.92.3 #3 (Red Hat Linux)) id 1lBjQP-0000Qh-8p; Mon, 15 Feb 2021 19:20:50 +0000 X-Virus-Scanned: by amavisd-new at test-mx.suse.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=suse.com; s=susede1; t=1613416848; h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc: mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=35iSk0+5UfxNhbQoMoqK8Z0u+AvwuK5VeLDZ0BFtGgc=; b=LxudusPDnEIzx32bpsNd8eGk9aEHEp8nORbgbhfo9m/WaYQJNvskWIV49SwUk+3e+wUm6W bvkuJfdiurilR7t9l+AqCl48/0xWlWnh1jxDaWj32SfJk9fDbkh0PhlICshQRWBYaiM9H0 Cssa+KhpPwQxypJN/O8+L/ThpHbYF+4= Received: from relay2.suse.de (unknown [195.135.221.27]) by mx2.suse.de (Postfix) with ESMTP id C9B2BAC32; Mon, 15 Feb 2021 19:20:47 +0000 (UTC) Date: Mon, 15 Feb 2021 20:20:45 +0100 From: Michal Hocko To: James Bottomley Subject: Re: [PATCH v17 07/10] mm: introduce memfd_secret system call to create "secret" memory areas Message-ID: References: <20210214091954.GM242749@kernel.org> <052DACE9-986B-424C-AF8E-D6A4277DE635@redhat.com> <244f86cba227fa49ca30cd595c4e5538fe2f7c2b.camel@linux.ibm.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20210215_142049_584887_5A0F8774 X-CRM114-Status: GOOD ( 43.48 ) X-BeenThere: linux-riscv@lists.infradead.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Mark Rutland , David Hildenbrand , Peter Zijlstra , Catalin Marinas , Dave Hansen , linux-mm@kvack.org, linux-kselftest@vger.kernel.org, "H. Peter Anvin" , Christopher Lameter , Shuah Khan , Thomas Gleixner , Elena Reshetova , linux-arch@vger.kernel.org, Tycho Andersen , linux-nvdimm@lists.01.org, Will Deacon , x86@kernel.org, Matthew Wilcox , Mike Rapoport , Ingo Molnar , Michael Kerrisk , Palmer Dabbelt , Arnd Bergmann , Hagen Paul Pfeifer , Borislav Petkov , Alexander Viro , Andy Lutomirski , Paul Walmsley , "Kirill A. Shutemov" , Dan Williams , linux-arm-kernel@lists.infradead.org, linux-api@vger.kernel.org, linux-kernel@vger.kernel.org, linux-riscv@lists.infradead.org, Palmer Dabbelt , linux-fsdevel@vger.kernel.org, Shakeel Butt , Andrew Morton , Rick Edgecombe , Roman Gushchin , Mike Rapoport Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "linux-riscv" Errors-To: linux-riscv-bounces+linux-riscv=archiver.kernel.org@lists.infradead.org T24gTW9uIDE1LTAyLTIxIDEwOjE0OjQzLCBKYW1lcyBCb3R0b21sZXkgd3JvdGU6Cj4gT24gTW9u LCAyMDIxLTAyLTE1IGF0IDEwOjEzICswMTAwLCBNaWNoYWwgSG9ja28gd3JvdGU6Cj4gPiBPbiBT dW4gMTQtMDItMjEgMTE6MjE6MDIsIEphbWVzIEJvdHRvbWxleSB3cm90ZToKPiA+ID4gT24gU3Vu LCAyMDIxLTAyLTE0IGF0IDEwOjU4ICswMTAwLCBEYXZpZCBIaWxkZW5icmFuZCB3cm90ZToKPiA+ ID4gWy4uLl0KPiA+ID4gPiA+IEFuZCBoZXJlIHdlIGNvbWUgdG8gdGhlIHF1ZXN0aW9uICJ3aGF0 IGFyZSB0aGUgZGlmZmVyZW5jZXMgdGhhdAo+ID4gPiA+ID4ganVzdGlmeSBhIG5ldyBzeXN0ZW0g Y2FsbD8iIGFuZCB0aGUgYW5zd2VyIHRvIHRoaXMgaXMgdmVyeQo+ID4gPiA+ID4gc3ViamVjdGl2 ZS4gQW5kIGFzIHN1Y2ggd2UgY2FuIGNvbnRpbnVlIGJpa2VzaGVkZGluZyBmb3JldmVyLgo+ID4g PiA+IAo+ID4gPiA+IEkgdGhpbmsgdGhpcyBmaXRzIGludG8gdGhlIGV4aXN0aW5nIG1lbWZkX2Ny ZWF0ZSgpIHN5c2NhbGwganVzdAo+ID4gPiA+IGZpbmUsIGFuZCBJIGhlYXJkIG5vIGNvbXBlbGxp bmcgYXJndW1lbnQgd2h5IGl0IHNob3VsZG7igJh0LiBUaGF04oCYcwo+ID4gPiA+IGFsbCBJIGNh biBzYXkuCj4gPiA+IAo+ID4gPiBPSywgc28gbGV0J3MgcmV2aWV3IGhpc3RvcnkuICBJbiB0aGUg Zmlyc3QgdHdvIGluY2FybmF0aW9ucyBvZiB0aGUKPiA+ID4gcGF0Y2gsIGl0IHdhcyBhbiBleHRl bnNpb24gb2YgbWVtZmRfY3JlYXRlKCkuICBUaGUgc3BlY2lmaWMKPiA+ID4gb2JqZWN0aW9uIGJ5 IEtpcmlsbCBTaHV0ZW1vdiB3YXMgdGhhdCBpdCBkb2Vzbid0IHNoYXJlIGFueSBjb2RlIGluCj4g PiA+IGNvbW1vbiB3aXRoIG1lbWZkIGFuZCBzbyBzaG91bGQgYmUgYSBzZXBhcmF0ZSBzeXN0ZW0g Y2FsbDoKPiA+ID4gCj4gPiA+IGh0dHBzOi8vbG9yZS5rZXJuZWwub3JnL2xpbnV4LWFwaS8yMDIw MDcxMzEwNTgxMi5kbnd0ZGhzdXlqM3hiaDRmQGJveC8KPiA+IAo+ID4gVGhhbmtzIGZvciB0aGUg cG9pbnRlci4gQnV0IHRoaXMgYXJndW1lbnQgaGFzbid0IGJlZW4gY2hhbGxlbmdlZCBhdAo+ID4g YWxsLiBJdCBoYXNuJ3QgYmVlbiBicm91Z2h0IHVwIHRoYXQgdGhlIG92ZXJsYXAgd291bGQgYmUg Y29uc2lkZXJhYmxlCj4gPiBoaWdoZXIgYnkgdGhlIGh1Z2V0bGIvc2VhbGluZyBzdXBwb3J0LiBB bmQgc28gZmFyIG5vYm9keSBoYXMgY2xhaW1lZAo+ID4gdGhvc2UgY29tYmluYXRpb25zIGFzIHVu dmlhYmxlLgo+IAo+IEtpcmlsbCBpcyBhY3R1YWxseSBpbnRlcmVzdGVkIGluIHRoZSBzZWFsaW5n IHBhdGggZm9yIGhpcyBLVk0gY29kZSBzbwo+IHdlIHRvb2sgYSBsb29rLiAgVGhlcmUgbWlnaHQg YmUgYSB0d28gbGluZSBvdmVybGFwIGluIG1lbWZkX2NyZWF0ZSBmb3IKPiB0aGUgc2VhbCBjYXNl LCBidXQgdGhlcmUncyBubyByZWFsIG92ZXJsYXAgaW4gbWVtZmRfYWRkX3NlYWxzIHdoaWNoIGlz Cj4gdGhlIGJ1bGsgb2YgdGhlIGNvZGUuICBTbyB0aGUgYmVzdCB3YXkgd291bGQgc2VlbSB0byBs aWZ0IHRoZSBpbm9kZSAuLi4KPiAtPiBzZWFscyBoZWxwZXJzIHRvIGJlIG5vbi1zdGF0aWMgc28g dGhleSBjYW4gYmUgcmV1c2VkIGFuZCByb2xsIG91cgo+IG93biBhZGRfc2VhbHMuCgpUaGVzZSBh cmUgaW1wbGVtZW50YXRpb24gZGV0YWlscyB3aGljaCBhcmUgbm90IHJlYWxseSByZWxldmFudCB0 byB0aGUKQVBJIElNSE8uIAoKPiBJIGNhbid0IHNlZSBhIHVzZSBjYXNlIGF0IGFsbCBmb3IgaHVn ZXRsYiBzdXBwb3J0LCBzbyBpdCBzZWVtcyB0byBiZSBhCj4gYml0IG9mIGFuIGFuZ2VscyBvbiBw aW4gaGVhZCBkaXNjdXNzaW9uLiAgSG93ZXZlciwgaWYgb25lIHdlcmUgdG8gY29tZQo+IGFsb25n IGhhbmRsaW5nIGl0IGluIHRoZSBzYW1lIHdheSBzZWVtcyByZWFzb25hYmxlLgoKVGhvc2UgYW5n ZWxzIGhhdmUgbWFkZSB0aGVpciB3YXkgdG8gbW1hcCwgU3lzdGVtIFYgc2htLCBtZW1mZF9jcmVh dGUgYW5kCm90aGVyIE1NIGludGVyZmFjZXMgd2hpY2ggaGF2ZSBuZXZlciBlbnZpc2lvbmVkIHdo ZW4gaW50cm9kdWNlZC4gSHVnZXRsYgpwYWdlcyB0byBiYWNrIGd1ZXN0IG1lbW9yeSBpcyBxdWl0 ZSBhIGNvbW1vbiB1c2VjYXNlIHNvIHdoeSBkbyB5b3UgdGhpbmsKdGhvc2UgZ3Vlc3RzIHdvdWxk bid0IGxpa2UgdG8gc2VlIHRoZWlyIG1lbW9yeSBiZSAic2VjcmV0Ij8KCkFzIEkndmUgc2FpZCBp biBteSBsYXN0IHJlc3BvbnNlIChZQ1pFR3VMSzk0c3pLWkRmQGRoY3AyMi5zdXNlLmN6KSwgSSBh bQpub3QgZ29pbmcgdG8gYXJndWUgYWxsIHRoZXNlIGFnYWluLiBJIGhhdmUgbWFkZSBteSBwb2lu dCBhbmQgeW91IGFyZQpmcmVlIHRvIHRha2UgaXQgb3IgbGVhdmUgaXQuCgo+ID4gPiBUaGUgb3Ro ZXIgb2JqZWN0aW9uIHJhaXNlZCBvZmZsaXN0IGlzIHRoYXQgaWYgd2UgZG8gdXNlCj4gPiA+IG1l bWZkX2NyZWF0ZSwgdGhlbiB3ZSBoYXZlIHRvIGFkZCBhbGwgdGhlIHNlY3JldCBtZW1vcnkgZmxh Z3MgYXMgYW4KPiA+ID4gYWRkaXRpb25hbCBpb2N0bCwgd2hlcmVhcyB0aGV5IGNhbiBiZSBzcGVj aWZpZWQgb24gb3BlbiBpZiB3ZSBkbyBhCj4gPiA+IHNlcGFyYXRlIHN5c3RlbSBjYWxsLiAgVGhl IGNvbnRhaW5lciBwZW9wbGUgdmlvbGVudGx5IG9iamVjdGVkIHRvCj4gPiA+IHRoZSBpb2N0bCBi ZWNhdXNlIGl0IGNhbid0IGJlIHByb3Blcmx5IGFuYWx5c2VkIGJ5IHNlY2NvbXAgYW5kIG11Y2gK PiA+ID4gcHJlZmVycmVkIHRoZSBzeXNjYWxsIHZlcnNpb24uCj4gPiA+IAo+ID4gPiBTaW5jZSB3 ZSdyZSBkdW1waW5nIHRoZSB1bmNhY2hlZCB2YXJpYW50LCB0aGUgaW9jdGwgcHJvYmxlbQo+ID4g PiBkaXNhcHBlYXJzIGJ1dCBzbyBkb2VzIHRoZSBwb3NzaWJpbGl0eSBvZiBldmVyIGFkZGluZyBp dCBiYWNrIGlmIHdlCj4gPiA+IHRha2Ugb24gdGhlIGNvbnRhaW5lciBwZW9wbGVzJyBvYmplY3Rp b24uICBUaGlzIGFyZ3VlcyBmb3IgYQo+ID4gPiBzZXBhcmF0ZSBzeXNjYWxsIGJlY2F1c2Ugd2Ug Y2FuIGFkZCBhZGRpdGlvbmFsIGZlYXR1cmVzIGFuZCBleHRlbmQKPiA+ID4gdGhlIEFQSSB3aXRo IGZsYWdzIHdpdGhvdXQgY2F1c2luZyBhbnRpLWlvY3RsIHJpb3RzLgo+ID4gCj4gPiBJIGFtIHNv cnJ5IGJ1dCBJIGRvIG5vdCB1bmRlcnN0YW5kIHRoaXMgYXJndW1lbnQuCj4gCj4gWW91IGRvbid0 IHVuZGVyc3RhbmQgd2h5IGNvbnRhaW5lciBndWFyZGluZyB0ZWNobm9sb2d5IGRvZXNuJ3QgbGlr ZQo+IGlvY3Rscz8KCk5vLCBJIGRpZCBub3Qgc2VlIHdoZXJlIHRoZSBpb2N0bCBhcmd1bWVudCBj YW1lIGZyb20uCgpbLi4uXQoKPiA+ICBXaGF0IGtpbmQgb2YgZmxhZ3MgYXJlIHdlIHRhbGtpbmcg YWJvdXQgYW5kIHdoeSB3b3VsZCB0aGF0IGJlIGEKPiA+IHByb2JsZW0gd2l0aCBtZW1mZF9jcmVh dGUgaW50ZXJmYWNlPyBDb3VsZCB5b3UgYmUgbW9yZSBzcGVjaWZpYwo+ID4gcGxlYXNlPwo+IAo+ IFlvdSBtZWFuIHdoYXQgd2VyZSB0aGUgaW9jdGwgZmxhZ3MgaW4gdGhlIHBhdGNoIHNlcmllcyBs aW5rZWQgYWJvdmU/IAo+IFRoZXkgd2VyZSBTRUNSRVRNRU1fRVhDTFVTSVZFIGFuZCBTRUNSRVRN RU1fVU5DQUNIRUQgaW4gcGF0Y2ggMy81LiAKCk9LIEkgc2VlLiBIb3cgbWFueSBwb3RlbnRpYWwg bW9kZXMgYXJlIHdlIHRhbGtpbmcgYWJvdXQ/IEEgZmV3IG9yCnBvdGVudGlhbGx5IG1hbnk/Cgo+ IFRoZXkgd2VyZSBldmVudHVhbGx5IGRyb3BwZWQgYWZ0ZXIgdjEwLCBiZWNhdXNlIG9mIHByb2Js ZW1zIHdpdGgKPiBhcmNoaXRlY3R1cmFsIHNlbWFudGljcywgd2l0aCB0aGUgaWRlYSB0aGF0IGl0 IGNvdWxkIGJlIGFkZGVkIGJhY2sKPiBhZ2FpbiBpZiBhIGNvbXBlbGxpbmcgbmVlZCBhcm9zZToK PiAKPiBodHRwczovL2xvcmUua2VybmVsLm9yZy9saW51eC1hcGkvMjAyMDExMjMwOTU0MzIuNTg2 MC0xLXJwcHRAa2VybmVsLm9yZy8KPiAKPiBJbiB0aGVvcnkgdGhlIGV4dHJhIGZsYWdzIGNvdWxk IGJlIG11bHRpcGxleGVkIGludG8gdGhlIG1lbWZkX2NyZWF0ZQo+IGZsYWdzIGxpa2UgaHVnZXRs YmZzIGlzIGJ1dCB3aXRoIDMyIGZsYWdzIGFuZCBhIGxvdCBhbHJlYWR5IHRha2VuIGl0Cj4gZ2V0 cyBtZXNzeSBmb3IgZXhwYW5zaW9uLiAgV2hlbiB3ZSBydW4gb3V0IG9mIGZsYWdzIHRoZSBmaXJz dCBxdWVzdGlvbgo+IHBlb3BsZSB3aWxsIGFzayBpcyAid2h5IGRpZG4ndCB5b3UgZG8gc2VwYXJh dGUgc3lzdGVtIGNhbGxzPyIuCgpPSywgSSBkbyBub3QgbmVjZXNzYXJpbHkgc2VlIGEgbGFjayBv ZiBmbGFnIHNwYWNlIGEgcHJvYmxlbS4gSSBjYW4gYmUKd3JvbmcgaGVyZSBidXQgSSBkbyBub3Qg c2VlIGhvdyB0aGF0IHdvdWxkIGJlIHNvbHZlZCBieSBhIHNlcGFyYXRlCnN5c2NhbGwgd2hlbiBp dCBzb3VuZHMgcmF0aGVyIGZvcnNlZWFibGUgdGhhdCBtYW55IG1vZGVzIHN1cHBvcnRlZCBieQpt ZW1mZF9jcmVhdGUgd2lsbCBldmVudHVhbGx5IGZpbmQgdGhlaXIgd2F5IHRvIGEgc2VjcmV0IG1l bW9yeSBhcyB3ZWxsLgpJZiBmb3Igbm8gb3RoZXIgcmVhc29uLCBzZWNyZXQgbWVtb3J5IGlzIG5v dGhpbmcgcmVhbGx5IHNwZWNpYWwuIEl0IGlzCmp1c3QgYSBtZW1vcnkgd2hpY2ggaXMgbm90IG1h cHBlZCB0byB0aGUga2VybmVsIHZpYSAxOjEgbWFwcGluZy4gVGhhdCdzCml0LiBBbmQgdGhhdCBj YW4gYmUgYXBwbGllZCB0byBhbnkgbWVtb3J5IHByb3ZpZGVkIHRvIHRoZSB1c2Vyc3BhY2UuCgpC dXQgSSBhbSByZXBlYXRpbmcgbXlzZWxmIGFnYWluIGhlcmUgc28gSSBiZXR0ZXIgc3RvcC4KLS0g Ck1pY2hhbCBIb2NrbwpTVVNFIExhYnMKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fCmxpbnV4LXJpc2N2IG1haWxpbmcgbGlzdApsaW51eC1yaXNjdkBsaXN0 cy5pbmZyYWRlYWQub3JnCmh0dHA6Ly9saXN0cy5pbmZyYWRlYWQub3JnL21haWxtYW4vbGlzdGlu Zm8vbGludXgtcmlzY3YK From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.8 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6FC5EC433DB for ; Mon, 15 Feb 2021 19:21:57 +0000 (UTC) Received: from merlin.infradead.org (merlin.infradead.org [205.233.59.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 1C13464D8F for ; Mon, 15 Feb 2021 19:21:57 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 1C13464D8F Authentication-Results: mail.kernel.org; dmarc=fail (p=quarantine dis=none) header.from=suse.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=merlin.20170209; h=Sender:Content-Transfer-Encoding: Content-Type:Cc:List-Subscribe:List-Help:List-Post:List-Archive: List-Unsubscribe:List-Id:In-Reply-To:MIME-Version:References:Message-ID: Subject:To:From:Date:Reply-To:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=ggkOoteagISgGceKbYi6+Ll+9k4gvRm8RLhDtfSQIAM=; b=k6yz96Ij4+A0rrtTfe0xT6ZIN wTRSmqUNEHp1KVyPR0kMUdtbIW/EZtO6l+cyJNAV8gFxwVSAbsuc2mhnwC3XpXdyfF4mn/CvBOEK3 zz5bAkcIjFl2rQOv5F9pAd33o10e8x1xgexW8dLPpjokXzkJjbfgjqhEUxv3yxCG7hJxa6/rdhEEs 3blIUX+sYFB0aPGO1uJVUktaDqkvkOzhVVVwPRvHMi9STSlFRwhqBZbWY4TlZ3RqP9MP4DI7JCa8V a7hNGGtU5KXNIXuD7Z0iN6EKtfVc2e4G8ktRYWUKxkvV1Kgi6KtqoXWlOsJkNJ4KbBPtHmINt9kkS 4lqjKlIqg==; Received: from localhost ([::1] helo=merlin.infradead.org) by merlin.infradead.org with esmtp (Exim 4.92.3 #3 (Red Hat Linux)) id 1lBjQT-0000SM-BI; Mon, 15 Feb 2021 19:20:53 +0000 Received: from mx2.suse.de ([195.135.220.15]) by merlin.infradead.org with esmtps (Exim 4.92.3 #3 (Red Hat Linux)) id 1lBjQP-0000Qh-8p; Mon, 15 Feb 2021 19:20:50 +0000 X-Virus-Scanned: by amavisd-new at test-mx.suse.de DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=suse.com; s=susede1; t=1613416848; h=from:from:reply-to:date:date:message-id:message-id:to:to:cc:cc: mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=35iSk0+5UfxNhbQoMoqK8Z0u+AvwuK5VeLDZ0BFtGgc=; b=LxudusPDnEIzx32bpsNd8eGk9aEHEp8nORbgbhfo9m/WaYQJNvskWIV49SwUk+3e+wUm6W bvkuJfdiurilR7t9l+AqCl48/0xWlWnh1jxDaWj32SfJk9fDbkh0PhlICshQRWBYaiM9H0 Cssa+KhpPwQxypJN/O8+L/ThpHbYF+4= Received: from relay2.suse.de (unknown [195.135.221.27]) by mx2.suse.de (Postfix) with ESMTP id C9B2BAC32; Mon, 15 Feb 2021 19:20:47 +0000 (UTC) Date: Mon, 15 Feb 2021 20:20:45 +0100 From: Michal Hocko To: James Bottomley Subject: Re: [PATCH v17 07/10] mm: introduce memfd_secret system call to create "secret" memory areas Message-ID: References: <20210214091954.GM242749@kernel.org> <052DACE9-986B-424C-AF8E-D6A4277DE635@redhat.com> <244f86cba227fa49ca30cd595c4e5538fe2f7c2b.camel@linux.ibm.com> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20210215_142049_584887_5A0F8774 X-CRM114-Status: GOOD ( 43.48 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Mark Rutland , David Hildenbrand , Peter Zijlstra , Catalin Marinas , Dave Hansen , linux-mm@kvack.org, linux-kselftest@vger.kernel.org, "H. Peter Anvin" , Christopher Lameter , Shuah Khan , Thomas Gleixner , Elena Reshetova , linux-arch@vger.kernel.org, Tycho Andersen , linux-nvdimm@lists.01.org, Will Deacon , x86@kernel.org, Matthew Wilcox , Mike Rapoport , Ingo Molnar , Michael Kerrisk , Palmer Dabbelt , Arnd Bergmann , Hagen Paul Pfeifer , Borislav Petkov , Alexander Viro , Andy Lutomirski , Paul Walmsley , "Kirill A. Shutemov" , Dan Williams , linux-arm-kernel@lists.infradead.org, linux-api@vger.kernel.org, linux-kernel@vger.kernel.org, linux-riscv@lists.infradead.org, Palmer Dabbelt , linux-fsdevel@vger.kernel.org, Shakeel Butt , Andrew Morton , Rick Edgecombe , Roman Gushchin , Mike Rapoport Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org T24gTW9uIDE1LTAyLTIxIDEwOjE0OjQzLCBKYW1lcyBCb3R0b21sZXkgd3JvdGU6Cj4gT24gTW9u LCAyMDIxLTAyLTE1IGF0IDEwOjEzICswMTAwLCBNaWNoYWwgSG9ja28gd3JvdGU6Cj4gPiBPbiBT dW4gMTQtMDItMjEgMTE6MjE6MDIsIEphbWVzIEJvdHRvbWxleSB3cm90ZToKPiA+ID4gT24gU3Vu LCAyMDIxLTAyLTE0IGF0IDEwOjU4ICswMTAwLCBEYXZpZCBIaWxkZW5icmFuZCB3cm90ZToKPiA+ ID4gWy4uLl0KPiA+ID4gPiA+IEFuZCBoZXJlIHdlIGNvbWUgdG8gdGhlIHF1ZXN0aW9uICJ3aGF0 IGFyZSB0aGUgZGlmZmVyZW5jZXMgdGhhdAo+ID4gPiA+ID4ganVzdGlmeSBhIG5ldyBzeXN0ZW0g Y2FsbD8iIGFuZCB0aGUgYW5zd2VyIHRvIHRoaXMgaXMgdmVyeQo+ID4gPiA+ID4gc3ViamVjdGl2 ZS4gQW5kIGFzIHN1Y2ggd2UgY2FuIGNvbnRpbnVlIGJpa2VzaGVkZGluZyBmb3JldmVyLgo+ID4g PiA+IAo+ID4gPiA+IEkgdGhpbmsgdGhpcyBmaXRzIGludG8gdGhlIGV4aXN0aW5nIG1lbWZkX2Ny ZWF0ZSgpIHN5c2NhbGwganVzdAo+ID4gPiA+IGZpbmUsIGFuZCBJIGhlYXJkIG5vIGNvbXBlbGxp bmcgYXJndW1lbnQgd2h5IGl0IHNob3VsZG7igJh0LiBUaGF04oCYcwo+ID4gPiA+IGFsbCBJIGNh biBzYXkuCj4gPiA+IAo+ID4gPiBPSywgc28gbGV0J3MgcmV2aWV3IGhpc3RvcnkuICBJbiB0aGUg Zmlyc3QgdHdvIGluY2FybmF0aW9ucyBvZiB0aGUKPiA+ID4gcGF0Y2gsIGl0IHdhcyBhbiBleHRl bnNpb24gb2YgbWVtZmRfY3JlYXRlKCkuICBUaGUgc3BlY2lmaWMKPiA+ID4gb2JqZWN0aW9uIGJ5 IEtpcmlsbCBTaHV0ZW1vdiB3YXMgdGhhdCBpdCBkb2Vzbid0IHNoYXJlIGFueSBjb2RlIGluCj4g PiA+IGNvbW1vbiB3aXRoIG1lbWZkIGFuZCBzbyBzaG91bGQgYmUgYSBzZXBhcmF0ZSBzeXN0ZW0g Y2FsbDoKPiA+ID4gCj4gPiA+IGh0dHBzOi8vbG9yZS5rZXJuZWwub3JnL2xpbnV4LWFwaS8yMDIw MDcxMzEwNTgxMi5kbnd0ZGhzdXlqM3hiaDRmQGJveC8KPiA+IAo+ID4gVGhhbmtzIGZvciB0aGUg cG9pbnRlci4gQnV0IHRoaXMgYXJndW1lbnQgaGFzbid0IGJlZW4gY2hhbGxlbmdlZCBhdAo+ID4g YWxsLiBJdCBoYXNuJ3QgYmVlbiBicm91Z2h0IHVwIHRoYXQgdGhlIG92ZXJsYXAgd291bGQgYmUg Y29uc2lkZXJhYmxlCj4gPiBoaWdoZXIgYnkgdGhlIGh1Z2V0bGIvc2VhbGluZyBzdXBwb3J0LiBB bmQgc28gZmFyIG5vYm9keSBoYXMgY2xhaW1lZAo+ID4gdGhvc2UgY29tYmluYXRpb25zIGFzIHVu dmlhYmxlLgo+IAo+IEtpcmlsbCBpcyBhY3R1YWxseSBpbnRlcmVzdGVkIGluIHRoZSBzZWFsaW5n IHBhdGggZm9yIGhpcyBLVk0gY29kZSBzbwo+IHdlIHRvb2sgYSBsb29rLiAgVGhlcmUgbWlnaHQg YmUgYSB0d28gbGluZSBvdmVybGFwIGluIG1lbWZkX2NyZWF0ZSBmb3IKPiB0aGUgc2VhbCBjYXNl LCBidXQgdGhlcmUncyBubyByZWFsIG92ZXJsYXAgaW4gbWVtZmRfYWRkX3NlYWxzIHdoaWNoIGlz Cj4gdGhlIGJ1bGsgb2YgdGhlIGNvZGUuICBTbyB0aGUgYmVzdCB3YXkgd291bGQgc2VlbSB0byBs aWZ0IHRoZSBpbm9kZSAuLi4KPiAtPiBzZWFscyBoZWxwZXJzIHRvIGJlIG5vbi1zdGF0aWMgc28g dGhleSBjYW4gYmUgcmV1c2VkIGFuZCByb2xsIG91cgo+IG93biBhZGRfc2VhbHMuCgpUaGVzZSBh cmUgaW1wbGVtZW50YXRpb24gZGV0YWlscyB3aGljaCBhcmUgbm90IHJlYWxseSByZWxldmFudCB0 byB0aGUKQVBJIElNSE8uIAoKPiBJIGNhbid0IHNlZSBhIHVzZSBjYXNlIGF0IGFsbCBmb3IgaHVn ZXRsYiBzdXBwb3J0LCBzbyBpdCBzZWVtcyB0byBiZSBhCj4gYml0IG9mIGFuIGFuZ2VscyBvbiBw aW4gaGVhZCBkaXNjdXNzaW9uLiAgSG93ZXZlciwgaWYgb25lIHdlcmUgdG8gY29tZQo+IGFsb25n IGhhbmRsaW5nIGl0IGluIHRoZSBzYW1lIHdheSBzZWVtcyByZWFzb25hYmxlLgoKVGhvc2UgYW5n ZWxzIGhhdmUgbWFkZSB0aGVpciB3YXkgdG8gbW1hcCwgU3lzdGVtIFYgc2htLCBtZW1mZF9jcmVh dGUgYW5kCm90aGVyIE1NIGludGVyZmFjZXMgd2hpY2ggaGF2ZSBuZXZlciBlbnZpc2lvbmVkIHdo ZW4gaW50cm9kdWNlZC4gSHVnZXRsYgpwYWdlcyB0byBiYWNrIGd1ZXN0IG1lbW9yeSBpcyBxdWl0 ZSBhIGNvbW1vbiB1c2VjYXNlIHNvIHdoeSBkbyB5b3UgdGhpbmsKdGhvc2UgZ3Vlc3RzIHdvdWxk bid0IGxpa2UgdG8gc2VlIHRoZWlyIG1lbW9yeSBiZSAic2VjcmV0Ij8KCkFzIEkndmUgc2FpZCBp biBteSBsYXN0IHJlc3BvbnNlIChZQ1pFR3VMSzk0c3pLWkRmQGRoY3AyMi5zdXNlLmN6KSwgSSBh bQpub3QgZ29pbmcgdG8gYXJndWUgYWxsIHRoZXNlIGFnYWluLiBJIGhhdmUgbWFkZSBteSBwb2lu dCBhbmQgeW91IGFyZQpmcmVlIHRvIHRha2UgaXQgb3IgbGVhdmUgaXQuCgo+ID4gPiBUaGUgb3Ro ZXIgb2JqZWN0aW9uIHJhaXNlZCBvZmZsaXN0IGlzIHRoYXQgaWYgd2UgZG8gdXNlCj4gPiA+IG1l bWZkX2NyZWF0ZSwgdGhlbiB3ZSBoYXZlIHRvIGFkZCBhbGwgdGhlIHNlY3JldCBtZW1vcnkgZmxh Z3MgYXMgYW4KPiA+ID4gYWRkaXRpb25hbCBpb2N0bCwgd2hlcmVhcyB0aGV5IGNhbiBiZSBzcGVj aWZpZWQgb24gb3BlbiBpZiB3ZSBkbyBhCj4gPiA+IHNlcGFyYXRlIHN5c3RlbSBjYWxsLiAgVGhl IGNvbnRhaW5lciBwZW9wbGUgdmlvbGVudGx5IG9iamVjdGVkIHRvCj4gPiA+IHRoZSBpb2N0bCBi ZWNhdXNlIGl0IGNhbid0IGJlIHByb3Blcmx5IGFuYWx5c2VkIGJ5IHNlY2NvbXAgYW5kIG11Y2gK PiA+ID4gcHJlZmVycmVkIHRoZSBzeXNjYWxsIHZlcnNpb24uCj4gPiA+IAo+ID4gPiBTaW5jZSB3 ZSdyZSBkdW1waW5nIHRoZSB1bmNhY2hlZCB2YXJpYW50LCB0aGUgaW9jdGwgcHJvYmxlbQo+ID4g PiBkaXNhcHBlYXJzIGJ1dCBzbyBkb2VzIHRoZSBwb3NzaWJpbGl0eSBvZiBldmVyIGFkZGluZyBp dCBiYWNrIGlmIHdlCj4gPiA+IHRha2Ugb24gdGhlIGNvbnRhaW5lciBwZW9wbGVzJyBvYmplY3Rp b24uICBUaGlzIGFyZ3VlcyBmb3IgYQo+ID4gPiBzZXBhcmF0ZSBzeXNjYWxsIGJlY2F1c2Ugd2Ug Y2FuIGFkZCBhZGRpdGlvbmFsIGZlYXR1cmVzIGFuZCBleHRlbmQKPiA+ID4gdGhlIEFQSSB3aXRo IGZsYWdzIHdpdGhvdXQgY2F1c2luZyBhbnRpLWlvY3RsIHJpb3RzLgo+ID4gCj4gPiBJIGFtIHNv cnJ5IGJ1dCBJIGRvIG5vdCB1bmRlcnN0YW5kIHRoaXMgYXJndW1lbnQuCj4gCj4gWW91IGRvbid0 IHVuZGVyc3RhbmQgd2h5IGNvbnRhaW5lciBndWFyZGluZyB0ZWNobm9sb2d5IGRvZXNuJ3QgbGlr ZQo+IGlvY3Rscz8KCk5vLCBJIGRpZCBub3Qgc2VlIHdoZXJlIHRoZSBpb2N0bCBhcmd1bWVudCBj YW1lIGZyb20uCgpbLi4uXQoKPiA+ICBXaGF0IGtpbmQgb2YgZmxhZ3MgYXJlIHdlIHRhbGtpbmcg YWJvdXQgYW5kIHdoeSB3b3VsZCB0aGF0IGJlIGEKPiA+IHByb2JsZW0gd2l0aCBtZW1mZF9jcmVh dGUgaW50ZXJmYWNlPyBDb3VsZCB5b3UgYmUgbW9yZSBzcGVjaWZpYwo+ID4gcGxlYXNlPwo+IAo+ IFlvdSBtZWFuIHdoYXQgd2VyZSB0aGUgaW9jdGwgZmxhZ3MgaW4gdGhlIHBhdGNoIHNlcmllcyBs aW5rZWQgYWJvdmU/IAo+IFRoZXkgd2VyZSBTRUNSRVRNRU1fRVhDTFVTSVZFIGFuZCBTRUNSRVRN RU1fVU5DQUNIRUQgaW4gcGF0Y2ggMy81LiAKCk9LIEkgc2VlLiBIb3cgbWFueSBwb3RlbnRpYWwg bW9kZXMgYXJlIHdlIHRhbGtpbmcgYWJvdXQ/IEEgZmV3IG9yCnBvdGVudGlhbGx5IG1hbnk/Cgo+ IFRoZXkgd2VyZSBldmVudHVhbGx5IGRyb3BwZWQgYWZ0ZXIgdjEwLCBiZWNhdXNlIG9mIHByb2Js ZW1zIHdpdGgKPiBhcmNoaXRlY3R1cmFsIHNlbWFudGljcywgd2l0aCB0aGUgaWRlYSB0aGF0IGl0 IGNvdWxkIGJlIGFkZGVkIGJhY2sKPiBhZ2FpbiBpZiBhIGNvbXBlbGxpbmcgbmVlZCBhcm9zZToK PiAKPiBodHRwczovL2xvcmUua2VybmVsLm9yZy9saW51eC1hcGkvMjAyMDExMjMwOTU0MzIuNTg2 MC0xLXJwcHRAa2VybmVsLm9yZy8KPiAKPiBJbiB0aGVvcnkgdGhlIGV4dHJhIGZsYWdzIGNvdWxk IGJlIG11bHRpcGxleGVkIGludG8gdGhlIG1lbWZkX2NyZWF0ZQo+IGZsYWdzIGxpa2UgaHVnZXRs YmZzIGlzIGJ1dCB3aXRoIDMyIGZsYWdzIGFuZCBhIGxvdCBhbHJlYWR5IHRha2VuIGl0Cj4gZ2V0 cyBtZXNzeSBmb3IgZXhwYW5zaW9uLiAgV2hlbiB3ZSBydW4gb3V0IG9mIGZsYWdzIHRoZSBmaXJz dCBxdWVzdGlvbgo+IHBlb3BsZSB3aWxsIGFzayBpcyAid2h5IGRpZG4ndCB5b3UgZG8gc2VwYXJh dGUgc3lzdGVtIGNhbGxzPyIuCgpPSywgSSBkbyBub3QgbmVjZXNzYXJpbHkgc2VlIGEgbGFjayBv ZiBmbGFnIHNwYWNlIGEgcHJvYmxlbS4gSSBjYW4gYmUKd3JvbmcgaGVyZSBidXQgSSBkbyBub3Qg c2VlIGhvdyB0aGF0IHdvdWxkIGJlIHNvbHZlZCBieSBhIHNlcGFyYXRlCnN5c2NhbGwgd2hlbiBp dCBzb3VuZHMgcmF0aGVyIGZvcnNlZWFibGUgdGhhdCBtYW55IG1vZGVzIHN1cHBvcnRlZCBieQpt ZW1mZF9jcmVhdGUgd2lsbCBldmVudHVhbGx5IGZpbmQgdGhlaXIgd2F5IHRvIGEgc2VjcmV0IG1l bW9yeSBhcyB3ZWxsLgpJZiBmb3Igbm8gb3RoZXIgcmVhc29uLCBzZWNyZXQgbWVtb3J5IGlzIG5v dGhpbmcgcmVhbGx5IHNwZWNpYWwuIEl0IGlzCmp1c3QgYSBtZW1vcnkgd2hpY2ggaXMgbm90IG1h cHBlZCB0byB0aGUga2VybmVsIHZpYSAxOjEgbWFwcGluZy4gVGhhdCdzCml0LiBBbmQgdGhhdCBj YW4gYmUgYXBwbGllZCB0byBhbnkgbWVtb3J5IHByb3ZpZGVkIHRvIHRoZSB1c2Vyc3BhY2UuCgpC dXQgSSBhbSByZXBlYXRpbmcgbXlzZWxmIGFnYWluIGhlcmUgc28gSSBiZXR0ZXIgc3RvcC4KLS0g Ck1pY2hhbCBIb2NrbwpTVVNFIExhYnMKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fCmxpbnV4LWFybS1rZXJuZWwgbWFpbGluZyBsaXN0CmxpbnV4LWFybS1r ZXJuZWxAbGlzdHMuaW5mcmFkZWFkLm9yZwpodHRwOi8vbGlzdHMuaW5mcmFkZWFkLm9yZy9tYWls bWFuL2xpc3RpbmZvL2xpbnV4LWFybS1rZXJuZWwK