Re: [PATCH 0/4] CRASH_ZEROIZE: Wipe secrets before kdump

Dave Young <[email protected]> Mon, 3 Aug 2026 20:00:32 +0800

Newsgroups	org.kernel.vger.keyrings,org.infradead.lists.kexec,org.kernel.vger.linux-devicetree,org.kernel.vger.linux-integrity,org.kernel.vger.linux-kernel,org.kernel.vger.linux-security-module,org.kvack.linux-mm
Message-ID	<[email protected]>

On 8/3/26 5:59 PM, David Howells wrote:
> Dave Young <[email protected]> wrote:
> 
>> Cleaning up secret data can be done with makedumpfile + eppic scripts (see
>> the manual of makedumpfile), or it is even possible to do so in kdump kernel
>> with Tao Liu's improvments for makedumpfile previously (I don't know the
>> status, probably dropped for the time being, but it is possible, cced him).
> 
> Does this represent a leak of the secrets?  Also do governmental
> standardisation bodies have opinions on what constitutes a leak?

It depends, for the crash case I'm not against to clear sensitive data, the
concern is to avoid extra complexity of logic pre-kdump.   Which
government?  Sorry I can not answer here.  

> 
> David
>