summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorprovos <provos@openbsd.org>1999-12-30 19:04:28 +0000
committerprovos <provos@openbsd.org>1999-12-30 19:04:28 +0000
commit7879df18bcbdc05dbdd3d2d21927f4ed35948ee3 (patch)
tree4c504f25911fd1d7bc2f6fb3dee4a697ebac7437
parentswap encryption for UVM, option UVM_SWAP_ENCRYPT. needs to be enabled (diff)
downloadwireguard-openbsd-7879df18bcbdc05dbdd3d2d21927f4ed35948ee3.tar.xz
wireguard-openbsd-7879df18bcbdc05dbdd3d2d21927f4ed35948ee3.zip
document UVM_SWAP_ENCRYPT
-rw-r--r--share/man/man4/options.414
1 files changed, 13 insertions, 1 deletions
diff --git a/share/man/man4/options.4 b/share/man/man4/options.4
index 16ec761ce01..fb5f43e5b38 100644
--- a/share/man/man4/options.4
+++ b/share/man/man4/options.4
@@ -1,4 +1,4 @@
-.\" $OpenBSD: options.4,v 1.41 1999/12/21 17:57:09 provos Exp $
+.\" $OpenBSD: options.4,v 1.42 1999/12/30 19:04:28 provos Exp $
.\" $NetBSD: options.4,v 1.21 1997/06/25 03:13:00 thorpej Exp $
.\"
.\" Copyright (c) 1998 Theo de Raadt
@@ -503,6 +503,18 @@ Adds support for the
boot option (User Kernel Config).
Allows modification of kernel settings (i.e., device parameters) before
booting the system.
+.It Cd option UVM_SWAP_ENCRYPT
+Enables kernel support for encrypting pages that are written out to
+swap storage. Swap encryption avoids that sensitive data stays
+alive on the disk even after the operating system has been shut down.
+This option should be turned on if cryptographic filesystems are used.
+The sysctl variable
+.Em vm.swapencrypt
+controls its behaviour. See
+.Xr sysctl 8
+and
+.Xr sysctl 3
+for details.
.El
.Ss Networking Options
.Bl -ohang