Re: [PATCH v2 0/2] mm,fork,security: introduce MADV_WIPEONFORK
From: Florian Weimer
Date: Wed Aug 09 2017 - 08:43:05 EST
On 08/09/2017 11:59 AM, Kirill A. Shutemov wrote:
> It's not obvious to me what would break if kernel would ignore
> MADV_DONTFORK or MADV_DONTDUMP.
Ignoring MADV_DONTDUMP could cause secrets to be written to disk,
contrary to the expected security policy of the system.
Thanks,
Florian