Re: providing memory objects to users

[Roland McGrath]

Note that there is no reason we can't, as a temporary measure, have a
privileged translator on /servers/defpager that accepts default_pager_*
calls and relays them to the real default pager.  It could then allow
unprivileged users to do object_create, and only privileged users to do the
swap-controlling calls.  We could make it check its node permission bits
against the caller, e.g. if you can read you can default_pager_info, if you
can write you can use default_pager_paging_storage.  Then you could
e.g. have a "swap" group that is allowed to use swapon/swapoff rather than
only root.