3 ms·
Ideally there would be a way for the OS to signal that it's going to hibernate, so that the application can get rid of the secret stuff (overwrite with zeroes e
by nextaccountic 5y ago
Ideally there would be a way for the OS to signal that it's going to hibernate, so that the application can get rid of the secret stuff (overwrite with zeroes etc) and go to a state that, when back from hibernation, would ask for a password again.
Or even, disable this when hibernating to a swap inside an encrypted luks partition (which also asks for a password when it wakes up)
- Galanwe 5y agoI guess it should be theorically possible already for processes to do that. Systemd for instance is monitoring the suspend state.
- mjw1007 5y agoPerhaps a reasonable way would be to have a memfd_secret() flag which requests "kill this process if you're going to hibernate". Then you could do the operations involving the secret in a dedicated subprocess.
- formerly_proven 5y agoThis sounds usable to me and also promotes process-based isolation of application subcomponents.