security-misc/usr/lib/dracut/modules.d/40sdmem-security-misc/wipe.sh

#!/bin/sh

echo "Checking for mounted disks..."
dmsetup ls --target crypt
echo "WIPE RAM!"
## TODO: remove -f (fast and insecure mode)
sdmem -v -f
echo "WIPE DONE!"
add shebang /bin/sh to fix lintian warning security-misc: executable-not-elf-or-script usr/lib/dracut/modules.d/40sdmem-security-misc/wipe.sh 2022-06-29 09:35:08 -04:00			`#!/bin/sh`

- Wipe LUKS Disk Encryption Key for Root Disk from RAM during Shutdown to defeat Cold Boot Attacks - Confirm in console output if encrypted mounts (root disk) is unmounted. (Because that is a pre-condition for wiping the LUKS full disk encryption key from RAM.) Thanks to @friedy10! https://github.com/friedy10/dracut/tree/master/modules.d/40sdmem https://forums.whonix.org/t/is-ram-wipe-possible-inside-whonix-cold-boot-attack-defense/5596 2022-06-29 09:32:55 -04:00			`echo "Checking for mounted disks..."`
			`dmsetup ls --target crypt`
			`echo "WIPE RAM!"`
comment 2022-06-29 13:02:39 -04:00			`## TODO: remove -f (fast and insecure mode)`
verbose 2022-06-29 13:02:53 -04:00			`sdmem -v -f`
- Wipe LUKS Disk Encryption Key for Root Disk from RAM during Shutdown to defeat Cold Boot Attacks - Confirm in console output if encrypted mounts (root disk) is unmounted. (Because that is a pre-condition for wiping the LUKS full disk encryption key from RAM.) Thanks to @friedy10! https://github.com/friedy10/dracut/tree/master/modules.d/40sdmem https://forums.whonix.org/t/is-ram-wipe-possible-inside-whonix-cold-boot-attack-defense/5596 2022-06-29 09:32:55 -04:00			`echo "WIPE DONE!"`