2 ms·
This is done for Linux Lockdown. For memfd_secret, it might not be considered good enough; I think the memory needs to be evicted.
by jchw 5y ago
This is done for Linux Lockdown. For memfd_secret, it might not be considered good enough; I think the memory needs to be evicted.
- api 5y agoWhat is the threat model for this? If it’s a highly advanced attacker with physical access not even that is good enough. The best we can do is a true hardware enclave.