Re: [PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump
Dave Young <[email protected]> Mon, 3 Aug 2026 20:00:32 +0800
| Newsgroups | gmane.linux.kernel.kexec,gmane.linux.drivers.devicetree,gmane.linux.kernel,gmane.linux.kernel.mm,gmane.linux.kernel.lsm |
|---|---|
| Message-ID | <[email protected]> |
On 8/3/26 5:59 PM, David Howells wrote: > Dave Young <[email protected]> wrote: > >> Cleaning up secret data can be done with makedumpfile + eppic scripts (see >> the manual of makedumpfile), or it is even possible to do so in kdump kernel >> with Tao Liu's improvments for makedumpfile previously (I don't know the >> status, probably dropped for the time being, but it is possible, cced him). > > Does this represent a leak of the secrets? Also do governmental > standardisation bodies have opinions on what constitutes a leak? It depends, for the crash case I'm not against to clear sensitive data, the concern is to avoid extra complexity of logic pre-kdump. Which government? Sorry I can not answer here. > > David >