Re: password-store /dev/shm mfs

"Andy Bradford" <[email protected]>
Newsgroups gmane.os.openbsd.misc
Message-ID <[email protected]>
Thus said Janne Johansson on Wed, 12 Aug 2026 14:39:59 +0200:

> That is correct, and if ever mfs contents get swapped out, the swap on
> openbsd is always  encrypted by a per-boot random key,  so noone could
> dig it out  of the swapdevice on  the next boot even if  you don't use
> FDE.

Are you sure?  It seems the default is:

#vm.swapencrypt.enable=0        # 0=Do not encrypt pages that go to swap

Andy
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.