CONFIG_RESET_ATTACK_MITIGATION: Reset memory attack mitigation

General informations

The Linux kernel configuration item CONFIG_RESET_ATTACK_MITIGATION:

• prompt: Reset memory attack mitigation
• type: bool
• depends on: CONFIG_EFI_STUB
• defined in drivers/firmware/efi/Kconfig
• found in Linux kernels: 4.14–4.20, 5.0–5.19, 6.0–6.12, 6.13-rc+HEAD

Help text

Request that the firmware clear the contents of RAM after a reboot using the TCG Platform Reset Attack Mitigation specification. This protects against an attacker forcibly rebooting the system while it still contains secrets in RAM, booting another OS and extracting the secrets. This should only be enabled when userland is configured to clear the MemoryOverwriteRequest flag on clean shutdown after secrets have been evicted, since otherwise it will trigger even on clean reboots.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: