Re: [PATCH] mm: Add kvfree_sensitive() for freeing sensitive data objects

[Linus Torvalds]

On Mon, Apr 6, 2020 at 10:51 AM David Howells <dhowells@xxxxxxxxxx> wrote:
>
> The allocation might be by vmalloc rather than kmalloc.  I'm not sure if that
> makes things more difficult.

It does add yet another place where we'd have to save the "this
allocation is special", but it's not insurmountable.

That said, I think the short-term and simple solution is to just teach
people that sensitive free's are different, and at least have the key
subsystem with sane naming.

And yes, then eventually convert the existing crypto subsystem uses
too for consistency.

            Linus