CONFIG_INIT_MLOCKED_ON_FREE_DEFAULT_ON: Enable mlocked memory zeroing on free

General informations

The Linux kernel configuration item CONFIG_INIT_MLOCKED_ON_FREE_DEFAULT_ON:

• prompt: Enable mlocked memory zeroing on free
• type: bool
• depends on: ! CONFIG_KMSAN
• defined in security/Kconfig.hardening
• found in Linux kernels: 6.10-rc+HEAD

Help text

This config has the effect of setting "init_mlocked_on_free=1" on the kernel command line. If it is enabled, all mlocked process memory is zeroed when freed. This restriction to mlocked memory improves performance over "init_on_free" but can still be used to protect confidential data like key material from content exposures to other processes, as well as live forensics and cold boot attacks. Any non-mlocked memory is not cleared before it is reassigned. This configuration can be overwritten by setting "init_mlocked_on_free=0" on the command line. The "init_on_free" boot option takes precedence over "init_mlocked_on_free".

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: