Re: [PATCH v2 0/2] mm,fork,security: introduce MADV_WIPEONFORK

From: Florian Weimer
Date: Wed Aug 09 2017 - 08:43:05 EST


On 08/09/2017 11:59 AM, Kirill A. Shutemov wrote:
> It's not obvious to me what would break if kernel would ignore
> MADV_DONTFORK or MADV_DONTDUMP.

Ignoring MADV_DONTDUMP could cause secrets to be written to disk,
contrary to the expected security policy of the system.

Thanks,
Florian