From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: To: 9fans@cse.psu.edu Subject: Re: [9fans] possible way to have the secstore on the cpu server From: "Russ Cox" MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit Date: Fri, 14 Jun 2002 12:42:27 -0400 Topicbox-Message-UUID: adcaf078-eaca-11e9-9e20-41e7f4b1d025 You could use kfs and make the files only bootes-readable. It doesn't matter that the service file is world-rw -- once it gets mounted the kernel is enforcing the appropriate attach names. You could run your own little dossrv. They don't really need to be noswap, since if you can read the swap disk after the pages get swapped out, then you could just read the disk containing the actual files. Arguably you don't need to be private either, since if you can debug the process you can read the underlying disk. Russ