Re: [PATCH] mm: Add kvfree_sensitive() for freeing sensitive data objects

[Linus Torvalds]

On Mon, Apr 6, 2020 at 10:12 AM Joe Perches <joe@xxxxxxxxxxx> wrote:
>
> Add yet another alloc flag like __GFP_SENSITIVE
> and have kfree operate on that and not have a
> kfree_sensitive at all.

That sounds potentially sensible. Maybe even a SLAB_SENSITIVE to mark
a whole slab cache sensitive for kmem_cache_create().

I'm not sure how controlled the allocations are, though. The
allocations that get used for keys etc might come from outside the
crypto layer.

                Linus