File tree Expand file tree Collapse file tree 1 file changed +2
-3
lines changed
Documentation/filesystems Expand file tree Collapse file tree 1 file changed +2
-3
lines changed Original file line number Diff line number Diff line change @@ -137,9 +137,8 @@ However, these ioctls have some limitations:
137
137
- In general, decrypted contents and filenames in the kernel VFS
138
138
caches are freed but not wiped. Therefore, portions thereof may be
139
139
recoverable from freed memory, even after the corresponding key(s)
140
- were wiped. To partially solve this, you can set
141
- CONFIG_PAGE_POISONING=y in your kernel config and add page_poison=1
142
- to your kernel command line. However, this has a performance cost.
140
+ were wiped. To partially solve this, you can add init_on_free=1 to
141
+ your kernel command line. However, this has a performance cost.
143
142
144
143
- Secret keys might still exist in CPU registers, in crypto
145
144
accelerator hardware (if used by the crypto API to implement any of
You can’t perform that action at this time.
0 commit comments