mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
From: Ferenc Wagner <wferi@niif.hu>
To: "Rafael J. Wysocki" <rjw@sisk.pl>
Cc: linux-pm@lists.linux-foundation.org,
	Andrew Morton <akpm@linux-foundation.org>,
	LKML <linux-kernel@vger.kernel.org>
Subject: Re: [linux-pm] intermittent suspend problem again
Date: Wed, 02 Dec 2009 02:58:41 +0100	[thread overview]
Message-ID: <87638qw2zy.fsf@tac.ki.iif.hu> (raw)
In-Reply-To: <200912012232.50951.rjw@sisk.pl> (Rafael J. Wysocki's message of "Tue, 1 Dec 2009 22:32:50 +0100")

"Rafael J. Wysocki" <rjw@sisk.pl> writes:

> On Tuesday 01 December 2009, Ferenc Wagner wrote:
>
>> "Rafael J. Wysocki" <rjw@sisk.pl> writes:
>> 
>>> On Tuesday 01 December 2009, Ferenc Wagner wrote:
>>>
>>>> "Rafael J. Wysocki" <rjw@sisk.pl> writes:
>>>>
>>>>> In addition to that, you can run multiple hibernation/resume cycles in
>>>>> a tight loop using the RTC wakealarm.
>>>> 
>>>> I'll do so, as soon as I find a way to automatically supply the dm-crypt
>>>> passphrase... or even better, learn to hibernate to ramdisk from the
>>>> initramfs. :)
>>>
>>> Well, you don't need to use swap encryption for _testing_. :-)
>> 
>> I use partition encryption, everything except for /boot is encrypted.
>
> If /boot is big enough, you could use a swap file in /boot for the testing.

Ramdisk worked good.  Maybe too good, because I left the machine doing
s2disks while I was having dinner, and it achieved some 120 suspends
without a freeze.  Only the e100 and the mii modules were loaded.

After some script munging I got the machine automatically boot with an
alternate passphrase, so in vivo testing is possible now.  I mean,
tomorrow.

Btw. s2disk has a strange effect of simulating enters during suspend.
It looks like this in a terminal:

$ sudo s2disk



















$ 
$ 
$ 
$ 
$ 
$ 
$ 
$ 
$ 
$ 
$ 
$ 
$ 
$ 
$ 
$ 
$ 
$ 
$ 
$ <cursor is here>

Can you also see this?

>> Apropos: does s2disk perform encryption with a temporary key even if I
>> don't supply and RSA key, to protect mlocked application data from being
>> present in the swap after restore?
>
> It can do that, but you need to provide a key during suspend and resume.
>
> Otherwise it doesn't use a random key, because it would have to store it in
> the clear in the image header.

So you don't feel like the "What is this 'Encrypt suspend image' for?"
Q&A in Documentation/swsusp.txt describes a real threat, do you?  If
an "application" has direct access to swap, then it's game over anyway.
-- 
Thanks,
Feri.

  reply	other threads:[~2009-12-02  1:58 UTC|newest]

Thread overview: 42+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
     [not found] <87fx93pwv2.fsf@tac.ki.iif.hu>
     [not found] ` <200910281956.44791.rjw@sisk.pl>
     [not found]   ` <87d447m52t.fsf@tac.ki.iif.hu>
2009-10-29 18:36     ` Rafael J. Wysocki
2009-10-29 22:31       ` Ferenc Wagner
2009-10-30 18:18         ` Rafael J. Wysocki
2009-10-30 19:03           ` Ferenc Wagner
2009-10-30 20:38             ` Rafael J. Wysocki
2009-10-31 12:02               ` Alan Jenkins
2009-10-31 14:06                 ` Ferenc Wagner
2009-10-31 19:11                   ` Rafael J. Wysocki
2009-11-01 21:53                     ` Ferenc Wagner
2009-11-03 11:02                       ` Ferenc Wagner
2009-11-11 11:29       ` Ferenc Wagner
2009-11-11 11:38         ` Rafael J. Wysocki
2009-11-11 13:29           ` Ferenc Wagner
2009-11-11 14:47             ` Rafael J. Wysocki
2009-11-13 16:35               ` Ferenc Wagner
2009-11-13 19:59                 ` Rafael J. Wysocki
2009-11-14  1:50                   ` Ferenc Wagner
2009-11-14 18:52                     ` Rafael J. Wysocki
2009-11-18  1:12                       ` Ferenc Wagner
2009-11-18 14:05                       ` Ferenc Wagner
2009-11-18 22:13                         ` Rafael J. Wysocki
2009-11-18 22:54                           ` Ferenc Wagner
2009-11-19 12:00                           ` Ferenc Wagner
2009-11-19 13:02                             ` Ferenc Wagner
2009-11-19 19:42                               ` Rafael J. Wysocki
2009-11-21 23:59                           ` [linux-pm] " Ferenc Wagner
2009-11-28 19:01                           ` Ferenc Wagner
2009-11-29  0:29                             ` Rafael J. Wysocki
2009-11-29 10:12                               ` Ferenc Wagner
2009-11-29 15:07                                 ` Rafael J. Wysocki
2009-12-01 10:29                                   ` Ferenc Wagner
2009-12-01 12:28                                     ` Rafael J. Wysocki
2009-12-01 17:46                                       ` Ferenc Wagner
2009-12-01 21:32                                         ` Rafael J. Wysocki
2009-12-02  1:58                                           ` Ferenc Wagner [this message]
2009-12-02 10:55                                             ` Ferenc Wagner
2009-12-02 21:33                                               ` Rafael J. Wysocki
2009-12-02 21:41                                                 ` Mikael Abrahamsson
2009-12-02 21:49                                               ` Rafael J. Wysocki
2009-12-12 19:31                                               ` Pavel Machek
2009-12-02 12:27                                             ` Stefan Seyfried
2009-12-12 19:27                                           ` s2disk encryption was " Pavel Machek

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=87638qw2zy.fsf@tac.ki.iif.hu \
    --to=wferi@niif.hu \
    --cc=akpm@linux-foundation.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-pm@lists.linux-foundation.org \
    --cc=rjw@sisk.pl \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

all inboxes | Powered by JetHome®