FreeBSD Memory Pages Not Locked?

=?unknown-8bit?Q?S=EAr=EAciya_Kurdistan=EE?= sereciya at kurdistan.ath.cx
Wed Apr 16 16:28:44 PDT 2003


Hello,

  I recently installed "gpnupg" from the ports collection and
  upon running it (after the key generation), I found myself
  seeing the following error:

  gpg: Warning: using insecure memory!

  ... Those of you who are impatient and think that this is a
   gpg &| port specific problem, please be patient and read on ...

  from: http://www.gnupg.org/documentation/faqs.html#q6.1
  Here's what the GPG FAQ says:

 "6.1) Why do I get "gpg: Warning: using insecure memory!

  On many systems this program should be installed as setuid.
  This is necessary to lock memory pages. Locking memory pages
  prevents the operating system from writing them to disk and
  thereby keeping your secret keys really secret. If you get
  no warning message about insecure memory your operating
  system supports locking without being root. The program
  drops root privileges as soon as locked memory is allocated."

  I would like to know if FreeBSD does indeed lack the
  functionality to lock memory pages, does it?

  If not... how come then?  Is this not something important,
  especially from a security standpoint?

  And if it does... how come I recieved this error then?

  Thanks in advance to anyone and everyone who may reply/post
  useful comments & suggestions..., thank you!

--$êrêciya Kurdistanî
+--------------------------------------------------------------+
| Welat xwe ava nake, dest bidin hevdu, pist nedin tu dijminî  |
|   Riya azadiyê ne hêsan e, hêviya xwe bernedin, dema me      |
|     nêzîk e.                                                 |
|                                                              |
| Hevaltî bi kesên du rû nekin, hevaltî bi hevdu ra bikin      |
|   Ne ji hevaltiya wan kesên pêxwas û rû dirêj, ne bi wan     |
|     kesên xwînperest, ne jî ji yên din.                      |
|                                                              |
|                                   -$êrêciya Kurdistanî       |
+--------------------------------------------------------------+
  translation provided on request: sereciya at kurdistan.ath.cx
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20030416/86b08ddb/attachment.bin


More information about the freebsd-questions mailing list