From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.6 required=3.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id B2E04C433E0 for ; Mon, 15 Feb 2021 18:15:25 +0000 (UTC) Received: from ml01.01.org (ml01.01.org [198.145.21.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 260C164DFF for ; Mon, 15 Feb 2021 18:15:25 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 260C164DFF Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=linux.ibm.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-nvdimm-bounces@lists.01.org Received: from ml01.vlan13.01.org (localhost [IPv6:::1]) by ml01.01.org (Postfix) with ESMTP id 0880D100EB324; Mon, 15 Feb 2021 10:15:25 -0800 (PST) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=148.163.158.5; helo=mx0a-001b2d01.pphosted.com; envelope-from=jejb@linux.ibm.com; receiver= Received: from mx0a-001b2d01.pphosted.com (mx0b-001b2d01.pphosted.com [148.163.158.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id 6AB19100EBBBD for ; Mon, 15 Feb 2021 10:15:21 -0800 (PST) Received: from pps.filterd (m0098414.ppops.net [127.0.0.1]) by mx0b-001b2d01.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 11FI3keQ089147; Mon, 15 Feb 2021 13:14:55 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=message-id : subject : from : reply-to : to : cc : date : in-reply-to : references : content-type : mime-version : content-transfer-encoding; s=pp1; bh=oGpfBMoJflzNtTxXhAAqknfbJZwwOWhWibJHXOD15mY=; b=B/bnia+10Cs1nS5Q/upnquv2ZqXghmk3a6oXvIJu1bYAT9fq48cugx6TbeiTQlsj7qZM r9narncQVfykPHEyJHuo45qRrCnDhJP4fLWXNTzh+wRkWX5CekXlUGk5CLJznaZt6huP QS1lVTZ4HiwSm6Zccy5axTKKb4qK9kdk4mVKgXfsgW4HArxGrxT1EA/Pn6mTps4Vjfvm m0YOQFc0aWwzXwNK3mVbIys228lxpSUTYg08cJcpzpHT4PcHyChXHf6by4iByZs77BV9 yKmIzsatDpKh4JWGLHQGoDjjCqXOeQXIJU15C840vpqciQ/nRrzDNGV2nbGbjXU11G1r lA== Received: from pps.reinject (localhost [127.0.0.1]) by mx0b-001b2d01.pphosted.com with ESMTP id 36qww5gb83-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Feb 2021 13:14:55 -0500 Received: from m0098414.ppops.net (m0098414.ppops.net [127.0.0.1]) by pps.reinject (8.16.0.36/8.16.0.36) with SMTP id 11FI4Lrj090689; Mon, 15 Feb 2021 13:14:54 -0500 Received: from ppma02dal.us.ibm.com (a.bd.3ea9.ip4.static.sl-reverse.com [169.62.189.10]) by mx0b-001b2d01.pphosted.com with ESMTP id 36qww5gb7m-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Feb 2021 13:14:54 -0500 Received: from pps.filterd (ppma02dal.us.ibm.com [127.0.0.1]) by ppma02dal.us.ibm.com (8.16.0.42/8.16.0.42) with SMTP id 11FICq9U024338; Mon, 15 Feb 2021 18:14:53 GMT Received: from b03cxnp07028.gho.boulder.ibm.com (b03cxnp07028.gho.boulder.ibm.com [9.17.130.15]) by ppma02dal.us.ibm.com with ESMTP id 36p6d9d37g-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Feb 2021 18:14:53 +0000 Received: from b03ledav004.gho.boulder.ibm.com (b03ledav004.gho.boulder.ibm.com [9.17.130.235]) by b03cxnp07028.gho.boulder.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id 11FIEph216515450 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Mon, 15 Feb 2021 18:14:51 GMT Received: from b03ledav004.gho.boulder.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id C21B67806A; Mon, 15 Feb 2021 18:14:51 +0000 (GMT) Received: from b03ledav004.gho.boulder.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id CA8027805E; Mon, 15 Feb 2021 18:14:44 +0000 (GMT) Received: from jarvis.int.hansenpartnership.com (unknown [9.85.199.127]) by b03ledav004.gho.boulder.ibm.com (Postfix) with ESMTP; Mon, 15 Feb 2021 18:14:44 +0000 (GMT) Message-ID: Subject: Re: [PATCH v17 07/10] mm: introduce memfd_secret system call to create "secret" memory areas From: James Bottomley To: Michal Hocko Date: Mon, 15 Feb 2021 10:14:43 -0800 In-Reply-To: References: <20210214091954.GM242749@kernel.org> <052DACE9-986B-424C-AF8E-D6A4277DE635@redhat.com> <244f86cba227fa49ca30cd595c4e5538fe2f7c2b.camel@linux.ibm.com> User-Agent: Evolution 3.34.4 MIME-Version: 1.0 X-TM-AS-GCONF: 00 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.369,18.0.761 definitions=2021-02-15_14:2021-02-12,2021-02-15 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 mlxscore=0 lowpriorityscore=0 malwarescore=0 suspectscore=0 clxscore=1015 adultscore=0 phishscore=0 priorityscore=1501 bulkscore=0 impostorscore=0 spamscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2102150137 Message-ID-Hash: HMWAOIATDOOEIKZ74GXFBEVVA7HN4EK6 X-Message-ID-Hash: HMWAOIATDOOEIKZ74GXFBEVVA7HN4EK6 X-MailFrom: jejb@linux.ibm.com X-Mailman-Rule-Hits: nonmember-moderation X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation CC: David Hildenbrand , Mike Rapoport , Mike Rapoport , Andrew Morton , Alexander Viro , Andy Lutomirski , Arnd Bergmann , Borislav Petkov , Catalin Marinas , Christopher Lameter , Dave Hansen , Elena Reshetova , "H. Peter Anvin" , Ingo Molnar , "Kirill A. Shutemov" , Matthew Wilcox , Mark Rutland , Michael Kerrisk , Palmer Dabbelt , Paul Walmsley , Peter Zijlstra , Rick Edgecombe , Roman Gushchin , Shakeel Butt , Shuah Khan , Thomas Gleixner , Tycho Ander sen , Will Deacon , linux-api@vger.kernel.org, linux-arch@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-fsdevel@vger.kernel.org, linux-mm@kvack.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, linux-nvdimm@lists.01.org, linux-riscv@lists.infradead.org, x86@kernel.org, Hagen Paul Pfeifer , Palmer Dabbelt X-Mailman-Version: 3.1.1 Precedence: list Reply-To: jejb@linux.ibm.com List-Id: "Linux-nvdimm developer list." Archived-At: List-Archive: List-Help: List-Post: List-Subscribe: List-Unsubscribe: Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 T24gTW9uLCAyMDIxLTAyLTE1IGF0IDEwOjEzICswMTAwLCBNaWNoYWwgSG9ja28gd3JvdGU6DQo+ IE9uIFN1biAxNC0wMi0yMSAxMToyMTowMiwgSmFtZXMgQm90dG9tbGV5IHdyb3RlOg0KPiA+IE9u IFN1biwgMjAyMS0wMi0xNCBhdCAxMDo1OCArMDEwMCwgRGF2aWQgSGlsZGVuYnJhbmQgd3JvdGU6 DQo+ID4gWy4uLl0NCj4gPiA+ID4gQW5kIGhlcmUgd2UgY29tZSB0byB0aGUgcXVlc3Rpb24gIndo YXQgYXJlIHRoZSBkaWZmZXJlbmNlcyB0aGF0DQo+ID4gPiA+IGp1c3RpZnkgYSBuZXcgc3lzdGVt IGNhbGw/IiBhbmQgdGhlIGFuc3dlciB0byB0aGlzIGlzIHZlcnkNCj4gPiA+ID4gc3ViamVjdGl2 ZS4gQW5kIGFzIHN1Y2ggd2UgY2FuIGNvbnRpbnVlIGJpa2VzaGVkZGluZyBmb3JldmVyLg0KPiA+ ID4gDQo+ID4gPiBJIHRoaW5rIHRoaXMgZml0cyBpbnRvIHRoZSBleGlzdGluZyBtZW1mZF9jcmVh dGUoKSBzeXNjYWxsIGp1c3QNCj4gPiA+IGZpbmUsIGFuZCBJIGhlYXJkIG5vIGNvbXBlbGxpbmcg YXJndW1lbnQgd2h5IGl0IHNob3VsZG7igJh0LiBUaGF04oCYcw0KPiA+ID4gYWxsIEkgY2FuIHNh eS4NCj4gPiANCj4gPiBPSywgc28gbGV0J3MgcmV2aWV3IGhpc3RvcnkuICBJbiB0aGUgZmlyc3Qg dHdvIGluY2FybmF0aW9ucyBvZiB0aGUNCj4gPiBwYXRjaCwgaXQgd2FzIGFuIGV4dGVuc2lvbiBv ZiBtZW1mZF9jcmVhdGUoKS4gIFRoZSBzcGVjaWZpYw0KPiA+IG9iamVjdGlvbiBieSBLaXJpbGwg U2h1dGVtb3Ygd2FzIHRoYXQgaXQgZG9lc24ndCBzaGFyZSBhbnkgY29kZSBpbg0KPiA+IGNvbW1v biB3aXRoIG1lbWZkIGFuZCBzbyBzaG91bGQgYmUgYSBzZXBhcmF0ZSBzeXN0ZW0gY2FsbDoNCj4g PiANCj4gPiBodHRwczovL2xvcmUua2VybmVsLm9yZy9saW51eC1hcGkvMjAyMDA3MTMxMDU4MTIu ZG53dGRoc3V5ajN4Ymg0ZkBib3gvDQo+IA0KPiBUaGFua3MgZm9yIHRoZSBwb2ludGVyLiBCdXQg dGhpcyBhcmd1bWVudCBoYXNuJ3QgYmVlbiBjaGFsbGVuZ2VkIGF0DQo+IGFsbC4gSXQgaGFzbid0 IGJlZW4gYnJvdWdodCB1cCB0aGF0IHRoZSBvdmVybGFwIHdvdWxkIGJlIGNvbnNpZGVyYWJsZQ0K PiBoaWdoZXIgYnkgdGhlIGh1Z2V0bGIvc2VhbGluZyBzdXBwb3J0LiBBbmQgc28gZmFyIG5vYm9k eSBoYXMgY2xhaW1lZA0KPiB0aG9zZSBjb21iaW5hdGlvbnMgYXMgdW52aWFibGUuDQoNCktpcmls bCBpcyBhY3R1YWxseSBpbnRlcmVzdGVkIGluIHRoZSBzZWFsaW5nIHBhdGggZm9yIGhpcyBLVk0g Y29kZSBzbw0Kd2UgdG9vayBhIGxvb2suICBUaGVyZSBtaWdodCBiZSBhIHR3byBsaW5lIG92ZXJs YXAgaW4gbWVtZmRfY3JlYXRlIGZvcg0KdGhlIHNlYWwgY2FzZSwgYnV0IHRoZXJlJ3Mgbm8gcmVh bCBvdmVybGFwIGluIG1lbWZkX2FkZF9zZWFscyB3aGljaCBpcw0KdGhlIGJ1bGsgb2YgdGhlIGNv ZGUuICBTbyB0aGUgYmVzdCB3YXkgd291bGQgc2VlbSB0byBsaWZ0IHRoZSBpbm9kZSAuLi4NCi0+ IHNlYWxzIGhlbHBlcnMgdG8gYmUgbm9uLXN0YXRpYyBzbyB0aGV5IGNhbiBiZSByZXVzZWQgYW5k IHJvbGwgb3VyDQpvd24gYWRkX3NlYWxzLg0KDQpJIGNhbid0IHNlZSBhIHVzZSBjYXNlIGF0IGFs bCBmb3IgaHVnZXRsYiBzdXBwb3J0LCBzbyBpdCBzZWVtcyB0byBiZSBhDQpiaXQgb2YgYW4gYW5n ZWxzIG9uIHBpbiBoZWFkIGRpc2N1c3Npb24uICBIb3dldmVyLCBpZiBvbmUgd2VyZSB0byBjb21l DQphbG9uZyBoYW5kbGluZyBpdCBpbiB0aGUgc2FtZSB3YXkgc2VlbXMgcmVhc29uYWJsZS4NCg0K PiA+IFRoZSBvdGhlciBvYmplY3Rpb24gcmFpc2VkIG9mZmxpc3QgaXMgdGhhdCBpZiB3ZSBkbyB1 c2UNCj4gPiBtZW1mZF9jcmVhdGUsIHRoZW4gd2UgaGF2ZSB0byBhZGQgYWxsIHRoZSBzZWNyZXQg bWVtb3J5IGZsYWdzIGFzIGFuDQo+ID4gYWRkaXRpb25hbCBpb2N0bCwgd2hlcmVhcyB0aGV5IGNh biBiZSBzcGVjaWZpZWQgb24gb3BlbiBpZiB3ZSBkbyBhDQo+ID4gc2VwYXJhdGUgc3lzdGVtIGNh bGwuICBUaGUgY29udGFpbmVyIHBlb3BsZSB2aW9sZW50bHkgb2JqZWN0ZWQgdG8NCj4gPiB0aGUg aW9jdGwgYmVjYXVzZSBpdCBjYW4ndCBiZSBwcm9wZXJseSBhbmFseXNlZCBieSBzZWNjb21wIGFu ZCBtdWNoDQo+ID4gcHJlZmVycmVkIHRoZSBzeXNjYWxsIHZlcnNpb24uDQo+ID4gDQo+ID4gU2lu Y2Ugd2UncmUgZHVtcGluZyB0aGUgdW5jYWNoZWQgdmFyaWFudCwgdGhlIGlvY3RsIHByb2JsZW0N Cj4gPiBkaXNhcHBlYXJzIGJ1dCBzbyBkb2VzIHRoZSBwb3NzaWJpbGl0eSBvZiBldmVyIGFkZGlu ZyBpdCBiYWNrIGlmIHdlDQo+ID4gdGFrZSBvbiB0aGUgY29udGFpbmVyIHBlb3BsZXMnIG9iamVj dGlvbi4gIFRoaXMgYXJndWVzIGZvciBhDQo+ID4gc2VwYXJhdGUgc3lzY2FsbCBiZWNhdXNlIHdl IGNhbiBhZGQgYWRkaXRpb25hbCBmZWF0dXJlcyBhbmQgZXh0ZW5kDQo+ID4gdGhlIEFQSSB3aXRo IGZsYWdzIHdpdGhvdXQgY2F1c2luZyBhbnRpLWlvY3RsIHJpb3RzLg0KPiANCj4gSSBhbSBzb3Jy eSBidXQgSSBkbyBub3QgdW5kZXJzdGFuZCB0aGlzIGFyZ3VtZW50Lg0KDQpZb3UgZG9uJ3QgdW5k ZXJzdGFuZCB3aHkgY29udGFpbmVyIGd1YXJkaW5nIHRlY2hub2xvZ3kgZG9lc24ndCBsaWtlDQpp b2N0bHM/ICBUaGUgcHJvYmxlbSBpcyBlYWNoIGlvY3RsIGlzIHRoZSBtdWx0aXBsZXhvciBpcyBz cGVjaWZpYyB0bw0KdGhlIHBhcnRpY3VsYXIgZmQgaW1wbGVtZW50YXRpb24sIHNvIHVubGlrZSBm Y250bCB5b3UgZG9uJ3QgaGF2ZSBnbG9iYWwNCmlvY3RsIG51bWJlcnMgKGFsdGhvdWdoIHdlIGRv IHRyeSB0byBzZXBhcmF0ZSB0aGUgc3BhY2Ugc29tZXdoYXQgd2l0aA0KdGhlIF9JTyBtYWNyb3Mp LiAgVGhpcyBtYWtlcyBhbmFseXNpcyBhbmQgYmxvY2tpbmcgYSBoYXJkIHByb2JsZW0gZm9yDQpj b250YWluZXIgc2VjY29tcC4NCg0KPiAgV2hhdCBraW5kIG9mIGZsYWdzIGFyZSB3ZSB0YWxraW5n IGFib3V0IGFuZCB3aHkgd291bGQgdGhhdCBiZSBhDQo+IHByb2JsZW0gd2l0aCBtZW1mZF9jcmVh dGUgaW50ZXJmYWNlPyBDb3VsZCB5b3UgYmUgbW9yZSBzcGVjaWZpYw0KPiBwbGVhc2U/DQoNCllv dSBtZWFuIHdoYXQgd2VyZSB0aGUgaW9jdGwgZmxhZ3MgaW4gdGhlIHBhdGNoIHNlcmllcyBsaW5r ZWQgYWJvdmU/IA0KVGhleSB3ZXJlIFNFQ1JFVE1FTV9FWENMVVNJVkUgYW5kIFNFQ1JFVE1FTV9V TkNBQ0hFRCBpbiBwYXRjaCAzLzUuIA0KVGhleSB3ZXJlIGV2ZW50dWFsbHkgZHJvcHBlZCBhZnRl ciB2MTAsIGJlY2F1c2Ugb2YgcHJvYmxlbXMgd2l0aA0KYXJjaGl0ZWN0dXJhbCBzZW1hbnRpY3Ms IHdpdGggdGhlIGlkZWEgdGhhdCBpdCBjb3VsZCBiZSBhZGRlZCBiYWNrDQphZ2FpbiBpZiBhIGNv bXBlbGxpbmcgbmVlZCBhcm9zZToNCg0KaHR0cHM6Ly9sb3JlLmtlcm5lbC5vcmcvbGludXgtYXBp LzIwMjAxMTIzMDk1NDMyLjU4NjAtMS1ycHB0QGtlcm5lbC5vcmcvDQoNCkluIHRoZW9yeSB0aGUg ZXh0cmEgZmxhZ3MgY291bGQgYmUgbXVsdGlwbGV4ZWQgaW50byB0aGUgbWVtZmRfY3JlYXRlDQpm bGFncyBsaWtlIGh1Z2V0bGJmcyBpcyBidXQgd2l0aCAzMiBmbGFncyBhbmQgYSBsb3QgYWxyZWFk eSB0YWtlbiBpdA0KZ2V0cyBtZXNzeSBmb3IgZXhwYW5zaW9uLiAgV2hlbiB3ZSBydW4gb3V0IG9m IGZsYWdzIHRoZSBmaXJzdCBxdWVzdGlvbg0KcGVvcGxlIHdpbGwgYXNrIGlzICJ3aHkgZGlkbid0 IHlvdSBkbyBzZXBhcmF0ZSBzeXN0ZW0gY2FsbHM/Ii4NCg0KSmFtZXMNCg0KDQpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpMaW51eC1udmRpbW0gbWFpbGlu ZyBsaXN0IC0tIGxpbnV4LW52ZGltbUBsaXN0cy4wMS5vcmcKVG8gdW5zdWJzY3JpYmUgc2VuZCBh biBlbWFpbCB0byBsaW51eC1udmRpbW0tbGVhdmVAbGlzdHMuMDEub3JnCg== From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.8 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 96AA9C433DB for ; Mon, 15 Feb 2021 18:18:13 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 5B4D564DFD for ; Mon, 15 Feb 2021 18:18:13 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231230AbhBOSRd (ORCPT ); Mon, 15 Feb 2021 13:17:33 -0500 Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5]:41900 "EHLO mx0a-001b2d01.pphosted.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S230462AbhBOSQP (ORCPT ); Mon, 15 Feb 2021 13:16:15 -0500 Received: from pps.filterd (m0098414.ppops.net [127.0.0.1]) by mx0b-001b2d01.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 11FI3keQ089147; Mon, 15 Feb 2021 13:14:55 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=message-id : subject : from : reply-to : to : cc : date : in-reply-to : references : content-type : mime-version : content-transfer-encoding; s=pp1; bh=oGpfBMoJflzNtTxXhAAqknfbJZwwOWhWibJHXOD15mY=; b=B/bnia+10Cs1nS5Q/upnquv2ZqXghmk3a6oXvIJu1bYAT9fq48cugx6TbeiTQlsj7qZM r9narncQVfykPHEyJHuo45qRrCnDhJP4fLWXNTzh+wRkWX5CekXlUGk5CLJznaZt6huP QS1lVTZ4HiwSm6Zccy5axTKKb4qK9kdk4mVKgXfsgW4HArxGrxT1EA/Pn6mTps4Vjfvm m0YOQFc0aWwzXwNK3mVbIys228lxpSUTYg08cJcpzpHT4PcHyChXHf6by4iByZs77BV9 yKmIzsatDpKh4JWGLHQGoDjjCqXOeQXIJU15C840vpqciQ/nRrzDNGV2nbGbjXU11G1r lA== Received: from pps.reinject (localhost [127.0.0.1]) by mx0b-001b2d01.pphosted.com with ESMTP id 36qww5gb83-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Feb 2021 13:14:55 -0500 Received: from m0098414.ppops.net (m0098414.ppops.net [127.0.0.1]) by pps.reinject (8.16.0.36/8.16.0.36) with SMTP id 11FI4Lrj090689; Mon, 15 Feb 2021 13:14:54 -0500 Received: from ppma02dal.us.ibm.com (a.bd.3ea9.ip4.static.sl-reverse.com [169.62.189.10]) by mx0b-001b2d01.pphosted.com with ESMTP id 36qww5gb7m-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Feb 2021 13:14:54 -0500 Received: from pps.filterd (ppma02dal.us.ibm.com [127.0.0.1]) by ppma02dal.us.ibm.com (8.16.0.42/8.16.0.42) with SMTP id 11FICq9U024338; Mon, 15 Feb 2021 18:14:53 GMT Received: from b03cxnp07028.gho.boulder.ibm.com (b03cxnp07028.gho.boulder.ibm.com [9.17.130.15]) by ppma02dal.us.ibm.com with ESMTP id 36p6d9d37g-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Feb 2021 18:14:53 +0000 Received: from b03ledav004.gho.boulder.ibm.com (b03ledav004.gho.boulder.ibm.com [9.17.130.235]) by b03cxnp07028.gho.boulder.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id 11FIEph216515450 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Mon, 15 Feb 2021 18:14:51 GMT Received: from b03ledav004.gho.boulder.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id C21B67806A; Mon, 15 Feb 2021 18:14:51 +0000 (GMT) Received: from b03ledav004.gho.boulder.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id CA8027805E; Mon, 15 Feb 2021 18:14:44 +0000 (GMT) Received: from jarvis.int.hansenpartnership.com (unknown [9.85.199.127]) by b03ledav004.gho.boulder.ibm.com (Postfix) with ESMTP; Mon, 15 Feb 2021 18:14:44 +0000 (GMT) Message-ID: Subject: Re: [PATCH v17 07/10] mm: introduce memfd_secret system call to create "secret" memory areas From: James Bottomley Reply-To: jejb@linux.ibm.com To: Michal Hocko Cc: David Hildenbrand , Mike Rapoport , Mike Rapoport , Andrew Morton , Alexander Viro , Andy Lutomirski , Arnd Bergmann , Borislav Petkov , Catalin Marinas , Christopher Lameter , Dan Williams , Dave Hansen , Elena Reshetova , "H. Peter Anvin" , Ingo Molnar , "Kirill A. Shutemov" , Matthew Wilcox , Mark Rutland , Michael Kerrisk , Palmer Dabbelt , Paul Walmsley , Peter Zijlstra , Rick Edgecombe , Roman Gushchin , Shakeel Butt , Shuah Khan , Thomas Gleixner , Tycho Andersen , Will Deacon , linux-api@vger.kernel.org, linux-arch@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-fsdevel@vger.kernel.org, linux-mm@kvack.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, linux-nvdimm@lists.01.org, linux-riscv@lists.infradead.org, x86@kernel.org, Hagen Paul Pfeifer , Palmer Dabbelt Date: Mon, 15 Feb 2021 10:14:43 -0800 In-Reply-To: References: <20210214091954.GM242749@kernel.org> <052DACE9-986B-424C-AF8E-D6A4277DE635@redhat.com> <244f86cba227fa49ca30cd595c4e5538fe2f7c2b.camel@linux.ibm.com> Content-Type: text/plain; charset="UTF-8" User-Agent: Evolution 3.34.4 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-TM-AS-GCONF: 00 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.369,18.0.761 definitions=2021-02-15_14:2021-02-12,2021-02-15 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 mlxscore=0 lowpriorityscore=0 malwarescore=0 suspectscore=0 clxscore=1015 adultscore=0 phishscore=0 priorityscore=1501 bulkscore=0 impostorscore=0 spamscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2102150137 Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, 2021-02-15 at 10:13 +0100, Michal Hocko wrote: > On Sun 14-02-21 11:21:02, James Bottomley wrote: > > On Sun, 2021-02-14 at 10:58 +0100, David Hildenbrand wrote: > > [...] > > > > And here we come to the question "what are the differences that > > > > justify a new system call?" and the answer to this is very > > > > subjective. And as such we can continue bikeshedding forever. > > > > > > I think this fits into the existing memfd_create() syscall just > > > fine, and I heard no compelling argument why it shouldn‘t. That‘s > > > all I can say. > > > > OK, so let's review history. In the first two incarnations of the > > patch, it was an extension of memfd_create(). The specific > > objection by Kirill Shutemov was that it doesn't share any code in > > common with memfd and so should be a separate system call: > > > > https://lore.kernel.org/linux-api/20200713105812.dnwtdhsuyj3xbh4f@box/ > > Thanks for the pointer. But this argument hasn't been challenged at > all. It hasn't been brought up that the overlap would be considerable > higher by the hugetlb/sealing support. And so far nobody has claimed > those combinations as unviable. Kirill is actually interested in the sealing path for his KVM code so we took a look. There might be a two line overlap in memfd_create for the seal case, but there's no real overlap in memfd_add_seals which is the bulk of the code. So the best way would seem to lift the inode ... -> seals helpers to be non-static so they can be reused and roll our own add_seals. I can't see a use case at all for hugetlb support, so it seems to be a bit of an angels on pin head discussion. However, if one were to come along handling it in the same way seems reasonable. > > The other objection raised offlist is that if we do use > > memfd_create, then we have to add all the secret memory flags as an > > additional ioctl, whereas they can be specified on open if we do a > > separate system call. The container people violently objected to > > the ioctl because it can't be properly analysed by seccomp and much > > preferred the syscall version. > > > > Since we're dumping the uncached variant, the ioctl problem > > disappears but so does the possibility of ever adding it back if we > > take on the container peoples' objection. This argues for a > > separate syscall because we can add additional features and extend > > the API with flags without causing anti-ioctl riots. > > I am sorry but I do not understand this argument. You don't understand why container guarding technology doesn't like ioctls? The problem is each ioctl is the multiplexor is specific to the particular fd implementation, so unlike fcntl you don't have global ioctl numbers (although we do try to separate the space somewhat with the _IO macros). This makes analysis and blocking a hard problem for container seccomp. > What kind of flags are we talking about and why would that be a > problem with memfd_create interface? Could you be more specific > please? You mean what were the ioctl flags in the patch series linked above? They were SECRETMEM_EXCLUSIVE and SECRETMEM_UNCACHED in patch 3/5. They were eventually dropped after v10, because of problems with architectural semantics, with the idea that it could be added back again if a compelling need arose: https://lore.kernel.org/linux-api/20201123095432.5860-1-rppt@kernel.org/ In theory the extra flags could be multiplexed into the memfd_create flags like hugetlbfs is but with 32 flags and a lot already taken it gets messy for expansion. When we run out of flags the first question people will ask is "why didn't you do separate system calls?". James From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.8 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 4CE3CC433E0 for ; Mon, 15 Feb 2021 18:15:36 +0000 (UTC) Received: from merlin.infradead.org (merlin.infradead.org [205.233.59.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 0B01264E05 for ; Mon, 15 Feb 2021 18:15:36 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 0B01264E05 Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=linux.ibm.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-riscv-bounces+linux-riscv=archiver.kernel.org@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=merlin.20170209; h=Sender:Content-Transfer-Encoding: Content-Type:Cc:Reply-To:List-Subscribe:List-Help:List-Post:List-Archive: List-Unsubscribe:List-Id:MIME-Version:References:In-Reply-To:Date:To:From: Subject:Message-ID:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=PtHbS42RmOf+m3pOOhldvnpT+JnqIsHXoAlancfzpcA=; b=taFxeufhoTMmUqO2EB7l3t4Lhv avlcQ5xkSqkI+ixYRXJX18GLOc1kBBM7NrHoxIt0MhBTbZspOKWbxcflSss4e2Qw5USF81U6Ne4jP Gns23Nv1HQk0yMJMtdddhhPO0vAX2S+L8eQnLmSITEHowf/d8cPIKHltqFVqI0wHerTLUPJgJvv5A z2rjoJ86Vte+GmLqcq9A4s+2YFY12PQLHxurSIYnrQ0BVl+XmtQZyRUDnRCGZ8sMYM/93/vl14hQe 6Qe1W/ScYN4ctQgK1J4/0MCbhUC9jk/S6DFHIK+H5EdNwpEA+d0gHtXgjTKcpOrEGcL3O6tSjw2T0 LuJS8fVQ==; Received: from localhost ([::1] helo=merlin.infradead.org) by merlin.infradead.org with esmtp (Exim 4.92.3 #3 (Red Hat Linux)) id 1lBiP8-0001rO-Bo; Mon, 15 Feb 2021 18:15:26 +0000 Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5] helo=mx0a-001b2d01.pphosted.com) by merlin.infradead.org with esmtps (Exim 4.92.3 #3 (Red Hat Linux)) id 1lBiP3-0001ql-Vl; Mon, 15 Feb 2021 18:15:22 +0000 Received: from pps.filterd (m0098414.ppops.net [127.0.0.1]) by mx0b-001b2d01.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 11FI3keQ089147; Mon, 15 Feb 2021 13:14:55 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=message-id : subject : from : reply-to : to : cc : date : in-reply-to : references : content-type : mime-version : content-transfer-encoding; s=pp1; bh=oGpfBMoJflzNtTxXhAAqknfbJZwwOWhWibJHXOD15mY=; b=B/bnia+10Cs1nS5Q/upnquv2ZqXghmk3a6oXvIJu1bYAT9fq48cugx6TbeiTQlsj7qZM r9narncQVfykPHEyJHuo45qRrCnDhJP4fLWXNTzh+wRkWX5CekXlUGk5CLJznaZt6huP QS1lVTZ4HiwSm6Zccy5axTKKb4qK9kdk4mVKgXfsgW4HArxGrxT1EA/Pn6mTps4Vjfvm m0YOQFc0aWwzXwNK3mVbIys228lxpSUTYg08cJcpzpHT4PcHyChXHf6by4iByZs77BV9 yKmIzsatDpKh4JWGLHQGoDjjCqXOeQXIJU15C840vpqciQ/nRrzDNGV2nbGbjXU11G1r lA== Received: from pps.reinject (localhost [127.0.0.1]) by mx0b-001b2d01.pphosted.com with ESMTP id 36qww5gb83-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Feb 2021 13:14:55 -0500 Received: from m0098414.ppops.net (m0098414.ppops.net [127.0.0.1]) by pps.reinject (8.16.0.36/8.16.0.36) with SMTP id 11FI4Lrj090689; Mon, 15 Feb 2021 13:14:54 -0500 Received: from ppma02dal.us.ibm.com (a.bd.3ea9.ip4.static.sl-reverse.com [169.62.189.10]) by mx0b-001b2d01.pphosted.com with ESMTP id 36qww5gb7m-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Feb 2021 13:14:54 -0500 Received: from pps.filterd (ppma02dal.us.ibm.com [127.0.0.1]) by ppma02dal.us.ibm.com (8.16.0.42/8.16.0.42) with SMTP id 11FICq9U024338; Mon, 15 Feb 2021 18:14:53 GMT Received: from b03cxnp07028.gho.boulder.ibm.com (b03cxnp07028.gho.boulder.ibm.com [9.17.130.15]) by ppma02dal.us.ibm.com with ESMTP id 36p6d9d37g-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Feb 2021 18:14:53 +0000 Received: from b03ledav004.gho.boulder.ibm.com (b03ledav004.gho.boulder.ibm.com [9.17.130.235]) by b03cxnp07028.gho.boulder.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id 11FIEph216515450 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Mon, 15 Feb 2021 18:14:51 GMT Received: from b03ledav004.gho.boulder.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id C21B67806A; Mon, 15 Feb 2021 18:14:51 +0000 (GMT) Received: from b03ledav004.gho.boulder.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id CA8027805E; Mon, 15 Feb 2021 18:14:44 +0000 (GMT) Received: from jarvis.int.hansenpartnership.com (unknown [9.85.199.127]) by b03ledav004.gho.boulder.ibm.com (Postfix) with ESMTP; Mon, 15 Feb 2021 18:14:44 +0000 (GMT) Message-ID: Subject: Re: [PATCH v17 07/10] mm: introduce memfd_secret system call to create "secret" memory areas From: James Bottomley To: Michal Hocko Date: Mon, 15 Feb 2021 10:14:43 -0800 In-Reply-To: References: <20210214091954.GM242749@kernel.org> <052DACE9-986B-424C-AF8E-D6A4277DE635@redhat.com> <244f86cba227fa49ca30cd595c4e5538fe2f7c2b.camel@linux.ibm.com> User-Agent: Evolution 3.34.4 MIME-Version: 1.0 X-TM-AS-GCONF: 00 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.369, 18.0.761 definitions=2021-02-15_14:2021-02-12, 2021-02-15 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 mlxscore=0 lowpriorityscore=0 malwarescore=0 suspectscore=0 clxscore=1015 adultscore=0 phishscore=0 priorityscore=1501 bulkscore=0 impostorscore=0 spamscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2102150137 X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20210215_131522_112273_F7C0B519 X-CRM114-Status: GOOD ( 41.50 ) X-BeenThere: linux-riscv@lists.infradead.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: jejb@linux.ibm.com Cc: Mark Rutland , David Hildenbrand , Peter Zijlstra , Catalin Marinas , Dave Hansen , linux-mm@kvack.org, linux-kselftest@vger.kernel.org, "H. Peter Anvin" , Christopher Lameter , Shuah Khan , Thomas Gleixner , Elena Reshetova , linux-arch@vger.kernel.org, Tycho Andersen , linux-nvdimm@lists.01.org, Will Deacon , x86@kernel.org, Matthew Wilcox , Mike Rapoport , Ingo Molnar , Michael Kerrisk , Palmer Dabbelt , Arnd Bergmann , Hagen Paul Pfeifer , Borislav Petkov , Alexander Viro , Andy Lutomirski , Paul Walmsley , "Kirill A. Shutemov" , Dan Williams , linux-arm-kernel@lists.infradead.org, linux-api@vger.kernel.org, linux-kernel@vger.kernel.org, linux-riscv@lists.infradead.org, Palmer Dabbelt , linux-fsdevel@vger.kernel.org, Shakeel Butt , Andrew Morton , Rick Edgecombe , Roman Gushchin , Mike Rapoport Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "linux-riscv" Errors-To: linux-riscv-bounces+linux-riscv=archiver.kernel.org@lists.infradead.org T24gTW9uLCAyMDIxLTAyLTE1IGF0IDEwOjEzICswMTAwLCBNaWNoYWwgSG9ja28gd3JvdGU6Cj4g T24gU3VuIDE0LTAyLTIxIDExOjIxOjAyLCBKYW1lcyBCb3R0b21sZXkgd3JvdGU6Cj4gPiBPbiBT dW4sIDIwMjEtMDItMTQgYXQgMTA6NTggKzAxMDAsIERhdmlkIEhpbGRlbmJyYW5kIHdyb3RlOgo+ ID4gWy4uLl0KPiA+ID4gPiBBbmQgaGVyZSB3ZSBjb21lIHRvIHRoZSBxdWVzdGlvbiAid2hhdCBh cmUgdGhlIGRpZmZlcmVuY2VzIHRoYXQKPiA+ID4gPiBqdXN0aWZ5IGEgbmV3IHN5c3RlbSBjYWxs PyIgYW5kIHRoZSBhbnN3ZXIgdG8gdGhpcyBpcyB2ZXJ5Cj4gPiA+ID4gc3ViamVjdGl2ZS4gQW5k IGFzIHN1Y2ggd2UgY2FuIGNvbnRpbnVlIGJpa2VzaGVkZGluZyBmb3JldmVyLgo+ID4gPiAKPiA+ ID4gSSB0aGluayB0aGlzIGZpdHMgaW50byB0aGUgZXhpc3RpbmcgbWVtZmRfY3JlYXRlKCkgc3lz Y2FsbCBqdXN0Cj4gPiA+IGZpbmUsIGFuZCBJIGhlYXJkIG5vIGNvbXBlbGxpbmcgYXJndW1lbnQg d2h5IGl0IHNob3VsZG7igJh0LiBUaGF04oCYcwo+ID4gPiBhbGwgSSBjYW4gc2F5Lgo+ID4gCj4g PiBPSywgc28gbGV0J3MgcmV2aWV3IGhpc3RvcnkuICBJbiB0aGUgZmlyc3QgdHdvIGluY2FybmF0 aW9ucyBvZiB0aGUKPiA+IHBhdGNoLCBpdCB3YXMgYW4gZXh0ZW5zaW9uIG9mIG1lbWZkX2NyZWF0 ZSgpLiAgVGhlIHNwZWNpZmljCj4gPiBvYmplY3Rpb24gYnkgS2lyaWxsIFNodXRlbW92IHdhcyB0 aGF0IGl0IGRvZXNuJ3Qgc2hhcmUgYW55IGNvZGUgaW4KPiA+IGNvbW1vbiB3aXRoIG1lbWZkIGFu ZCBzbyBzaG91bGQgYmUgYSBzZXBhcmF0ZSBzeXN0ZW0gY2FsbDoKPiA+IAo+ID4gaHR0cHM6Ly9s b3JlLmtlcm5lbC5vcmcvbGludXgtYXBpLzIwMjAwNzEzMTA1ODEyLmRud3RkaHN1eWozeGJoNGZA Ym94Lwo+IAo+IFRoYW5rcyBmb3IgdGhlIHBvaW50ZXIuIEJ1dCB0aGlzIGFyZ3VtZW50IGhhc24n dCBiZWVuIGNoYWxsZW5nZWQgYXQKPiBhbGwuIEl0IGhhc24ndCBiZWVuIGJyb3VnaHQgdXAgdGhh dCB0aGUgb3ZlcmxhcCB3b3VsZCBiZSBjb25zaWRlcmFibGUKPiBoaWdoZXIgYnkgdGhlIGh1Z2V0 bGIvc2VhbGluZyBzdXBwb3J0LiBBbmQgc28gZmFyIG5vYm9keSBoYXMgY2xhaW1lZAo+IHRob3Nl IGNvbWJpbmF0aW9ucyBhcyB1bnZpYWJsZS4KCktpcmlsbCBpcyBhY3R1YWxseSBpbnRlcmVzdGVk IGluIHRoZSBzZWFsaW5nIHBhdGggZm9yIGhpcyBLVk0gY29kZSBzbwp3ZSB0b29rIGEgbG9vay4g IFRoZXJlIG1pZ2h0IGJlIGEgdHdvIGxpbmUgb3ZlcmxhcCBpbiBtZW1mZF9jcmVhdGUgZm9yCnRo ZSBzZWFsIGNhc2UsIGJ1dCB0aGVyZSdzIG5vIHJlYWwgb3ZlcmxhcCBpbiBtZW1mZF9hZGRfc2Vh bHMgd2hpY2ggaXMKdGhlIGJ1bGsgb2YgdGhlIGNvZGUuICBTbyB0aGUgYmVzdCB3YXkgd291bGQg c2VlbSB0byBsaWZ0IHRoZSBpbm9kZSAuLi4KLT4gc2VhbHMgaGVscGVycyB0byBiZSBub24tc3Rh dGljIHNvIHRoZXkgY2FuIGJlIHJldXNlZCBhbmQgcm9sbCBvdXIKb3duIGFkZF9zZWFscy4KCkkg Y2FuJ3Qgc2VlIGEgdXNlIGNhc2UgYXQgYWxsIGZvciBodWdldGxiIHN1cHBvcnQsIHNvIGl0IHNl ZW1zIHRvIGJlIGEKYml0IG9mIGFuIGFuZ2VscyBvbiBwaW4gaGVhZCBkaXNjdXNzaW9uLiAgSG93 ZXZlciwgaWYgb25lIHdlcmUgdG8gY29tZQphbG9uZyBoYW5kbGluZyBpdCBpbiB0aGUgc2FtZSB3 YXkgc2VlbXMgcmVhc29uYWJsZS4KCj4gPiBUaGUgb3RoZXIgb2JqZWN0aW9uIHJhaXNlZCBvZmZs aXN0IGlzIHRoYXQgaWYgd2UgZG8gdXNlCj4gPiBtZW1mZF9jcmVhdGUsIHRoZW4gd2UgaGF2ZSB0 byBhZGQgYWxsIHRoZSBzZWNyZXQgbWVtb3J5IGZsYWdzIGFzIGFuCj4gPiBhZGRpdGlvbmFsIGlv Y3RsLCB3aGVyZWFzIHRoZXkgY2FuIGJlIHNwZWNpZmllZCBvbiBvcGVuIGlmIHdlIGRvIGEKPiA+ IHNlcGFyYXRlIHN5c3RlbSBjYWxsLiAgVGhlIGNvbnRhaW5lciBwZW9wbGUgdmlvbGVudGx5IG9i amVjdGVkIHRvCj4gPiB0aGUgaW9jdGwgYmVjYXVzZSBpdCBjYW4ndCBiZSBwcm9wZXJseSBhbmFs eXNlZCBieSBzZWNjb21wIGFuZCBtdWNoCj4gPiBwcmVmZXJyZWQgdGhlIHN5c2NhbGwgdmVyc2lv bi4KPiA+IAo+ID4gU2luY2Ugd2UncmUgZHVtcGluZyB0aGUgdW5jYWNoZWQgdmFyaWFudCwgdGhl IGlvY3RsIHByb2JsZW0KPiA+IGRpc2FwcGVhcnMgYnV0IHNvIGRvZXMgdGhlIHBvc3NpYmlsaXR5 IG9mIGV2ZXIgYWRkaW5nIGl0IGJhY2sgaWYgd2UKPiA+IHRha2Ugb24gdGhlIGNvbnRhaW5lciBw ZW9wbGVzJyBvYmplY3Rpb24uICBUaGlzIGFyZ3VlcyBmb3IgYQo+ID4gc2VwYXJhdGUgc3lzY2Fs bCBiZWNhdXNlIHdlIGNhbiBhZGQgYWRkaXRpb25hbCBmZWF0dXJlcyBhbmQgZXh0ZW5kCj4gPiB0 aGUgQVBJIHdpdGggZmxhZ3Mgd2l0aG91dCBjYXVzaW5nIGFudGktaW9jdGwgcmlvdHMuCj4gCj4g SSBhbSBzb3JyeSBidXQgSSBkbyBub3QgdW5kZXJzdGFuZCB0aGlzIGFyZ3VtZW50LgoKWW91IGRv bid0IHVuZGVyc3RhbmQgd2h5IGNvbnRhaW5lciBndWFyZGluZyB0ZWNobm9sb2d5IGRvZXNuJ3Qg bGlrZQppb2N0bHM/ICBUaGUgcHJvYmxlbSBpcyBlYWNoIGlvY3RsIGlzIHRoZSBtdWx0aXBsZXhv ciBpcyBzcGVjaWZpYyB0bwp0aGUgcGFydGljdWxhciBmZCBpbXBsZW1lbnRhdGlvbiwgc28gdW5s aWtlIGZjbnRsIHlvdSBkb24ndCBoYXZlIGdsb2JhbAppb2N0bCBudW1iZXJzIChhbHRob3VnaCB3 ZSBkbyB0cnkgdG8gc2VwYXJhdGUgdGhlIHNwYWNlIHNvbWV3aGF0IHdpdGgKdGhlIF9JTyBtYWNy b3MpLiAgVGhpcyBtYWtlcyBhbmFseXNpcyBhbmQgYmxvY2tpbmcgYSBoYXJkIHByb2JsZW0gZm9y CmNvbnRhaW5lciBzZWNjb21wLgoKPiAgV2hhdCBraW5kIG9mIGZsYWdzIGFyZSB3ZSB0YWxraW5n IGFib3V0IGFuZCB3aHkgd291bGQgdGhhdCBiZSBhCj4gcHJvYmxlbSB3aXRoIG1lbWZkX2NyZWF0 ZSBpbnRlcmZhY2U/IENvdWxkIHlvdSBiZSBtb3JlIHNwZWNpZmljCj4gcGxlYXNlPwoKWW91IG1l YW4gd2hhdCB3ZXJlIHRoZSBpb2N0bCBmbGFncyBpbiB0aGUgcGF0Y2ggc2VyaWVzIGxpbmtlZCBh Ym92ZT8gClRoZXkgd2VyZSBTRUNSRVRNRU1fRVhDTFVTSVZFIGFuZCBTRUNSRVRNRU1fVU5DQUNI RUQgaW4gcGF0Y2ggMy81LiAKVGhleSB3ZXJlIGV2ZW50dWFsbHkgZHJvcHBlZCBhZnRlciB2MTAs IGJlY2F1c2Ugb2YgcHJvYmxlbXMgd2l0aAphcmNoaXRlY3R1cmFsIHNlbWFudGljcywgd2l0aCB0 aGUgaWRlYSB0aGF0IGl0IGNvdWxkIGJlIGFkZGVkIGJhY2sKYWdhaW4gaWYgYSBjb21wZWxsaW5n IG5lZWQgYXJvc2U6CgpodHRwczovL2xvcmUua2VybmVsLm9yZy9saW51eC1hcGkvMjAyMDExMjMw OTU0MzIuNTg2MC0xLXJwcHRAa2VybmVsLm9yZy8KCkluIHRoZW9yeSB0aGUgZXh0cmEgZmxhZ3Mg Y291bGQgYmUgbXVsdGlwbGV4ZWQgaW50byB0aGUgbWVtZmRfY3JlYXRlCmZsYWdzIGxpa2UgaHVn ZXRsYmZzIGlzIGJ1dCB3aXRoIDMyIGZsYWdzIGFuZCBhIGxvdCBhbHJlYWR5IHRha2VuIGl0Cmdl dHMgbWVzc3kgZm9yIGV4cGFuc2lvbi4gIFdoZW4gd2UgcnVuIG91dCBvZiBmbGFncyB0aGUgZmly c3QgcXVlc3Rpb24KcGVvcGxlIHdpbGwgYXNrIGlzICJ3aHkgZGlkbid0IHlvdSBkbyBzZXBhcmF0 ZSBzeXN0ZW0gY2FsbHM/Ii4KCkphbWVzCgoKCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwpsaW51eC1yaXNjdiBtYWlsaW5nIGxpc3QKbGludXgtcmlzY3ZA bGlzdHMuaW5mcmFkZWFkLm9yZwpodHRwOi8vbGlzdHMuaW5mcmFkZWFkLm9yZy9tYWlsbWFuL2xp c3RpbmZvL2xpbnV4LXJpc2N2Cg== From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.8 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 60B6BC433E0 for ; Mon, 15 Feb 2021 18:16:35 +0000 (UTC) Received: from merlin.infradead.org (merlin.infradead.org [205.233.59.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 1FA5264DEB for ; Mon, 15 Feb 2021 18:16:35 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 1FA5264DEB Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=linux.ibm.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=merlin.20170209; h=Sender:Content-Transfer-Encoding: Content-Type:Cc:Reply-To:List-Subscribe:List-Help:List-Post:List-Archive: List-Unsubscribe:List-Id:MIME-Version:References:In-Reply-To:Date:To:From: Subject:Message-ID:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=zDSbaiNgOzc+lmhfO7sHFRMAuXXeJLrwetEa3PEG/uQ=; b=tyLefT6n0m2C5/tM+W1BXK+lTX /mo4pGV4i5YQL+VL7IaunWA+SzZmt3Z9ywC1xPYIPMHU99IbvtywrWoPent0u1nhHwJ9SQmc7Ov// zlCQBa8o21ZYrJ9IbQZ165Y9HGw2/Wt/ZbkCFHD4uOCyCAuUAwb8l6V6affVccWzjp3/CbRy3E151 0iFnEH9PYDgDxR99kYVbPRRFusUnCk6uAlCQLGDCqiVMYnE+9B5WA+L5u/RVnUPRqQNofiy3rl6bu 0U68Baa+qSheNE7dGN7R3AL9+DIBldFhAuaoqb69RmxbmRpo3rStZ2HhMukX0uf6m2SCDvA+6u5kJ WVHSW+0w==; Received: from localhost ([::1] helo=merlin.infradead.org) by merlin.infradead.org with esmtp (Exim 4.92.3 #3 (Red Hat Linux)) id 1lBiP7-0001rB-20; Mon, 15 Feb 2021 18:15:25 +0000 Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5] helo=mx0a-001b2d01.pphosted.com) by merlin.infradead.org with esmtps (Exim 4.92.3 #3 (Red Hat Linux)) id 1lBiP3-0001ql-Vl; Mon, 15 Feb 2021 18:15:22 +0000 Received: from pps.filterd (m0098414.ppops.net [127.0.0.1]) by mx0b-001b2d01.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 11FI3keQ089147; Mon, 15 Feb 2021 13:14:55 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ibm.com; h=message-id : subject : from : reply-to : to : cc : date : in-reply-to : references : content-type : mime-version : content-transfer-encoding; s=pp1; bh=oGpfBMoJflzNtTxXhAAqknfbJZwwOWhWibJHXOD15mY=; b=B/bnia+10Cs1nS5Q/upnquv2ZqXghmk3a6oXvIJu1bYAT9fq48cugx6TbeiTQlsj7qZM r9narncQVfykPHEyJHuo45qRrCnDhJP4fLWXNTzh+wRkWX5CekXlUGk5CLJznaZt6huP QS1lVTZ4HiwSm6Zccy5axTKKb4qK9kdk4mVKgXfsgW4HArxGrxT1EA/Pn6mTps4Vjfvm m0YOQFc0aWwzXwNK3mVbIys228lxpSUTYg08cJcpzpHT4PcHyChXHf6by4iByZs77BV9 yKmIzsatDpKh4JWGLHQGoDjjCqXOeQXIJU15C840vpqciQ/nRrzDNGV2nbGbjXU11G1r lA== Received: from pps.reinject (localhost [127.0.0.1]) by mx0b-001b2d01.pphosted.com with ESMTP id 36qww5gb83-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Feb 2021 13:14:55 -0500 Received: from m0098414.ppops.net (m0098414.ppops.net [127.0.0.1]) by pps.reinject (8.16.0.36/8.16.0.36) with SMTP id 11FI4Lrj090689; Mon, 15 Feb 2021 13:14:54 -0500 Received: from ppma02dal.us.ibm.com (a.bd.3ea9.ip4.static.sl-reverse.com [169.62.189.10]) by mx0b-001b2d01.pphosted.com with ESMTP id 36qww5gb7m-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Feb 2021 13:14:54 -0500 Received: from pps.filterd (ppma02dal.us.ibm.com [127.0.0.1]) by ppma02dal.us.ibm.com (8.16.0.42/8.16.0.42) with SMTP id 11FICq9U024338; Mon, 15 Feb 2021 18:14:53 GMT Received: from b03cxnp07028.gho.boulder.ibm.com (b03cxnp07028.gho.boulder.ibm.com [9.17.130.15]) by ppma02dal.us.ibm.com with ESMTP id 36p6d9d37g-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Feb 2021 18:14:53 +0000 Received: from b03ledav004.gho.boulder.ibm.com (b03ledav004.gho.boulder.ibm.com [9.17.130.235]) by b03cxnp07028.gho.boulder.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id 11FIEph216515450 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Mon, 15 Feb 2021 18:14:51 GMT Received: from b03ledav004.gho.boulder.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id C21B67806A; Mon, 15 Feb 2021 18:14:51 +0000 (GMT) Received: from b03ledav004.gho.boulder.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id CA8027805E; Mon, 15 Feb 2021 18:14:44 +0000 (GMT) Received: from jarvis.int.hansenpartnership.com (unknown [9.85.199.127]) by b03ledav004.gho.boulder.ibm.com (Postfix) with ESMTP; Mon, 15 Feb 2021 18:14:44 +0000 (GMT) Message-ID: Subject: Re: [PATCH v17 07/10] mm: introduce memfd_secret system call to create "secret" memory areas From: James Bottomley To: Michal Hocko Date: Mon, 15 Feb 2021 10:14:43 -0800 In-Reply-To: References: <20210214091954.GM242749@kernel.org> <052DACE9-986B-424C-AF8E-D6A4277DE635@redhat.com> <244f86cba227fa49ca30cd595c4e5538fe2f7c2b.camel@linux.ibm.com> User-Agent: Evolution 3.34.4 MIME-Version: 1.0 X-TM-AS-GCONF: 00 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.369, 18.0.761 definitions=2021-02-15_14:2021-02-12, 2021-02-15 signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 mlxscore=0 lowpriorityscore=0 malwarescore=0 suspectscore=0 clxscore=1015 adultscore=0 phishscore=0 priorityscore=1501 bulkscore=0 impostorscore=0 spamscore=0 mlxlogscore=999 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2009150000 definitions=main-2102150137 X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20210215_131522_112273_F7C0B519 X-CRM114-Status: GOOD ( 41.50 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: jejb@linux.ibm.com Cc: Mark Rutland , David Hildenbrand , Peter Zijlstra , Catalin Marinas , Dave Hansen , linux-mm@kvack.org, linux-kselftest@vger.kernel.org, "H. Peter Anvin" , Christopher Lameter , Shuah Khan , Thomas Gleixner , Elena Reshetova , linux-arch@vger.kernel.org, Tycho Andersen , linux-nvdimm@lists.01.org, Will Deacon , x86@kernel.org, Matthew Wilcox , Mike Rapoport , Ingo Molnar , Michael Kerrisk , Palmer Dabbelt , Arnd Bergmann , Hagen Paul Pfeifer , Borislav Petkov , Alexander Viro , Andy Lutomirski , Paul Walmsley , "Kirill A. Shutemov" , Dan Williams , linux-arm-kernel@lists.infradead.org, linux-api@vger.kernel.org, linux-kernel@vger.kernel.org, linux-riscv@lists.infradead.org, Palmer Dabbelt , linux-fsdevel@vger.kernel.org, Shakeel Butt , Andrew Morton , Rick Edgecombe , Roman Gushchin , Mike Rapoport Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org T24gTW9uLCAyMDIxLTAyLTE1IGF0IDEwOjEzICswMTAwLCBNaWNoYWwgSG9ja28gd3JvdGU6Cj4g T24gU3VuIDE0LTAyLTIxIDExOjIxOjAyLCBKYW1lcyBCb3R0b21sZXkgd3JvdGU6Cj4gPiBPbiBT dW4sIDIwMjEtMDItMTQgYXQgMTA6NTggKzAxMDAsIERhdmlkIEhpbGRlbmJyYW5kIHdyb3RlOgo+ ID4gWy4uLl0KPiA+ID4gPiBBbmQgaGVyZSB3ZSBjb21lIHRvIHRoZSBxdWVzdGlvbiAid2hhdCBh cmUgdGhlIGRpZmZlcmVuY2VzIHRoYXQKPiA+ID4gPiBqdXN0aWZ5IGEgbmV3IHN5c3RlbSBjYWxs PyIgYW5kIHRoZSBhbnN3ZXIgdG8gdGhpcyBpcyB2ZXJ5Cj4gPiA+ID4gc3ViamVjdGl2ZS4gQW5k IGFzIHN1Y2ggd2UgY2FuIGNvbnRpbnVlIGJpa2VzaGVkZGluZyBmb3JldmVyLgo+ID4gPiAKPiA+ ID4gSSB0aGluayB0aGlzIGZpdHMgaW50byB0aGUgZXhpc3RpbmcgbWVtZmRfY3JlYXRlKCkgc3lz Y2FsbCBqdXN0Cj4gPiA+IGZpbmUsIGFuZCBJIGhlYXJkIG5vIGNvbXBlbGxpbmcgYXJndW1lbnQg d2h5IGl0IHNob3VsZG7igJh0LiBUaGF04oCYcwo+ID4gPiBhbGwgSSBjYW4gc2F5Lgo+ID4gCj4g PiBPSywgc28gbGV0J3MgcmV2aWV3IGhpc3RvcnkuICBJbiB0aGUgZmlyc3QgdHdvIGluY2FybmF0 aW9ucyBvZiB0aGUKPiA+IHBhdGNoLCBpdCB3YXMgYW4gZXh0ZW5zaW9uIG9mIG1lbWZkX2NyZWF0 ZSgpLiAgVGhlIHNwZWNpZmljCj4gPiBvYmplY3Rpb24gYnkgS2lyaWxsIFNodXRlbW92IHdhcyB0 aGF0IGl0IGRvZXNuJ3Qgc2hhcmUgYW55IGNvZGUgaW4KPiA+IGNvbW1vbiB3aXRoIG1lbWZkIGFu ZCBzbyBzaG91bGQgYmUgYSBzZXBhcmF0ZSBzeXN0ZW0gY2FsbDoKPiA+IAo+ID4gaHR0cHM6Ly9s b3JlLmtlcm5lbC5vcmcvbGludXgtYXBpLzIwMjAwNzEzMTA1ODEyLmRud3RkaHN1eWozeGJoNGZA Ym94Lwo+IAo+IFRoYW5rcyBmb3IgdGhlIHBvaW50ZXIuIEJ1dCB0aGlzIGFyZ3VtZW50IGhhc24n dCBiZWVuIGNoYWxsZW5nZWQgYXQKPiBhbGwuIEl0IGhhc24ndCBiZWVuIGJyb3VnaHQgdXAgdGhh dCB0aGUgb3ZlcmxhcCB3b3VsZCBiZSBjb25zaWRlcmFibGUKPiBoaWdoZXIgYnkgdGhlIGh1Z2V0 bGIvc2VhbGluZyBzdXBwb3J0LiBBbmQgc28gZmFyIG5vYm9keSBoYXMgY2xhaW1lZAo+IHRob3Nl IGNvbWJpbmF0aW9ucyBhcyB1bnZpYWJsZS4KCktpcmlsbCBpcyBhY3R1YWxseSBpbnRlcmVzdGVk IGluIHRoZSBzZWFsaW5nIHBhdGggZm9yIGhpcyBLVk0gY29kZSBzbwp3ZSB0b29rIGEgbG9vay4g IFRoZXJlIG1pZ2h0IGJlIGEgdHdvIGxpbmUgb3ZlcmxhcCBpbiBtZW1mZF9jcmVhdGUgZm9yCnRo ZSBzZWFsIGNhc2UsIGJ1dCB0aGVyZSdzIG5vIHJlYWwgb3ZlcmxhcCBpbiBtZW1mZF9hZGRfc2Vh bHMgd2hpY2ggaXMKdGhlIGJ1bGsgb2YgdGhlIGNvZGUuICBTbyB0aGUgYmVzdCB3YXkgd291bGQg c2VlbSB0byBsaWZ0IHRoZSBpbm9kZSAuLi4KLT4gc2VhbHMgaGVscGVycyB0byBiZSBub24tc3Rh dGljIHNvIHRoZXkgY2FuIGJlIHJldXNlZCBhbmQgcm9sbCBvdXIKb3duIGFkZF9zZWFscy4KCkkg Y2FuJ3Qgc2VlIGEgdXNlIGNhc2UgYXQgYWxsIGZvciBodWdldGxiIHN1cHBvcnQsIHNvIGl0IHNl ZW1zIHRvIGJlIGEKYml0IG9mIGFuIGFuZ2VscyBvbiBwaW4gaGVhZCBkaXNjdXNzaW9uLiAgSG93 ZXZlciwgaWYgb25lIHdlcmUgdG8gY29tZQphbG9uZyBoYW5kbGluZyBpdCBpbiB0aGUgc2FtZSB3 YXkgc2VlbXMgcmVhc29uYWJsZS4KCj4gPiBUaGUgb3RoZXIgb2JqZWN0aW9uIHJhaXNlZCBvZmZs aXN0IGlzIHRoYXQgaWYgd2UgZG8gdXNlCj4gPiBtZW1mZF9jcmVhdGUsIHRoZW4gd2UgaGF2ZSB0 byBhZGQgYWxsIHRoZSBzZWNyZXQgbWVtb3J5IGZsYWdzIGFzIGFuCj4gPiBhZGRpdGlvbmFsIGlv Y3RsLCB3aGVyZWFzIHRoZXkgY2FuIGJlIHNwZWNpZmllZCBvbiBvcGVuIGlmIHdlIGRvIGEKPiA+ IHNlcGFyYXRlIHN5c3RlbSBjYWxsLiAgVGhlIGNvbnRhaW5lciBwZW9wbGUgdmlvbGVudGx5IG9i amVjdGVkIHRvCj4gPiB0aGUgaW9jdGwgYmVjYXVzZSBpdCBjYW4ndCBiZSBwcm9wZXJseSBhbmFs eXNlZCBieSBzZWNjb21wIGFuZCBtdWNoCj4gPiBwcmVmZXJyZWQgdGhlIHN5c2NhbGwgdmVyc2lv bi4KPiA+IAo+ID4gU2luY2Ugd2UncmUgZHVtcGluZyB0aGUgdW5jYWNoZWQgdmFyaWFudCwgdGhl IGlvY3RsIHByb2JsZW0KPiA+IGRpc2FwcGVhcnMgYnV0IHNvIGRvZXMgdGhlIHBvc3NpYmlsaXR5 IG9mIGV2ZXIgYWRkaW5nIGl0IGJhY2sgaWYgd2UKPiA+IHRha2Ugb24gdGhlIGNvbnRhaW5lciBw ZW9wbGVzJyBvYmplY3Rpb24uICBUaGlzIGFyZ3VlcyBmb3IgYQo+ID4gc2VwYXJhdGUgc3lzY2Fs bCBiZWNhdXNlIHdlIGNhbiBhZGQgYWRkaXRpb25hbCBmZWF0dXJlcyBhbmQgZXh0ZW5kCj4gPiB0 aGUgQVBJIHdpdGggZmxhZ3Mgd2l0aG91dCBjYXVzaW5nIGFudGktaW9jdGwgcmlvdHMuCj4gCj4g SSBhbSBzb3JyeSBidXQgSSBkbyBub3QgdW5kZXJzdGFuZCB0aGlzIGFyZ3VtZW50LgoKWW91IGRv bid0IHVuZGVyc3RhbmQgd2h5IGNvbnRhaW5lciBndWFyZGluZyB0ZWNobm9sb2d5IGRvZXNuJ3Qg bGlrZQppb2N0bHM/ICBUaGUgcHJvYmxlbSBpcyBlYWNoIGlvY3RsIGlzIHRoZSBtdWx0aXBsZXhv ciBpcyBzcGVjaWZpYyB0bwp0aGUgcGFydGljdWxhciBmZCBpbXBsZW1lbnRhdGlvbiwgc28gdW5s aWtlIGZjbnRsIHlvdSBkb24ndCBoYXZlIGdsb2JhbAppb2N0bCBudW1iZXJzIChhbHRob3VnaCB3 ZSBkbyB0cnkgdG8gc2VwYXJhdGUgdGhlIHNwYWNlIHNvbWV3aGF0IHdpdGgKdGhlIF9JTyBtYWNy b3MpLiAgVGhpcyBtYWtlcyBhbmFseXNpcyBhbmQgYmxvY2tpbmcgYSBoYXJkIHByb2JsZW0gZm9y CmNvbnRhaW5lciBzZWNjb21wLgoKPiAgV2hhdCBraW5kIG9mIGZsYWdzIGFyZSB3ZSB0YWxraW5n IGFib3V0IGFuZCB3aHkgd291bGQgdGhhdCBiZSBhCj4gcHJvYmxlbSB3aXRoIG1lbWZkX2NyZWF0 ZSBpbnRlcmZhY2U/IENvdWxkIHlvdSBiZSBtb3JlIHNwZWNpZmljCj4gcGxlYXNlPwoKWW91IG1l YW4gd2hhdCB3ZXJlIHRoZSBpb2N0bCBmbGFncyBpbiB0aGUgcGF0Y2ggc2VyaWVzIGxpbmtlZCBh Ym92ZT8gClRoZXkgd2VyZSBTRUNSRVRNRU1fRVhDTFVTSVZFIGFuZCBTRUNSRVRNRU1fVU5DQUNI RUQgaW4gcGF0Y2ggMy81LiAKVGhleSB3ZXJlIGV2ZW50dWFsbHkgZHJvcHBlZCBhZnRlciB2MTAs IGJlY2F1c2Ugb2YgcHJvYmxlbXMgd2l0aAphcmNoaXRlY3R1cmFsIHNlbWFudGljcywgd2l0aCB0 aGUgaWRlYSB0aGF0IGl0IGNvdWxkIGJlIGFkZGVkIGJhY2sKYWdhaW4gaWYgYSBjb21wZWxsaW5n IG5lZWQgYXJvc2U6CgpodHRwczovL2xvcmUua2VybmVsLm9yZy9saW51eC1hcGkvMjAyMDExMjMw OTU0MzIuNTg2MC0xLXJwcHRAa2VybmVsLm9yZy8KCkluIHRoZW9yeSB0aGUgZXh0cmEgZmxhZ3Mg Y291bGQgYmUgbXVsdGlwbGV4ZWQgaW50byB0aGUgbWVtZmRfY3JlYXRlCmZsYWdzIGxpa2UgaHVn ZXRsYmZzIGlzIGJ1dCB3aXRoIDMyIGZsYWdzIGFuZCBhIGxvdCBhbHJlYWR5IHRha2VuIGl0Cmdl dHMgbWVzc3kgZm9yIGV4cGFuc2lvbi4gIFdoZW4gd2UgcnVuIG91dCBvZiBmbGFncyB0aGUgZmly c3QgcXVlc3Rpb24KcGVvcGxlIHdpbGwgYXNrIGlzICJ3aHkgZGlkbid0IHlvdSBkbyBzZXBhcmF0 ZSBzeXN0ZW0gY2FsbHM/Ii4KCkphbWVzCgoKCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwpsaW51eC1hcm0ta2VybmVsIG1haWxpbmcgbGlzdApsaW51eC1h cm0ta2VybmVsQGxpc3RzLmluZnJhZGVhZC5vcmcKaHR0cDovL2xpc3RzLmluZnJhZGVhZC5vcmcv bWFpbG1hbi9saXN0aW5mby9saW51eC1hcm0ta2VybmVsCg==