Hello,
Would it make sense to implement a kernel option that would clear kernel
memory before freeing it (by kfree or free_page(s))?
Unless I'm missing something, uncleared memory previously used for
kernel allocations could later be recycled for user allocations, making
it possible for a user program to access sensitive driver data if it's
lucky.
Tough clearing memory should be efficient (thanks to the use of
memset(), optimized for each platform), there would of course be a
significant performance hit. However, this could be acceptable for
systems with strong security requirements...
What do you think? If this idea makes sense, I'll be glad to help in
implementing it.
Thanks in advance,
Cheers,
Michael.
--
Michael Opdenacker, Free Electrons
Free Embedded Linux Training Materials
on http://free-electrons.com/training
(More than 1000 pages!)
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
[Index of Archives]
[Kernel Newbies]
[Netfilter]
[Bugtraq]
[Photo]
[Stuff]
[Gimp]
[Yosemite News]
[MIPS Linux]
[ARM Linux]
[Linux Security]
[Linux RAID]
[Video 4 Linux]
[Linux for the blind]
[Linux Resources]
