Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-19 11:04:08 -04:00
Code Issues Projects Releases Packages Wiki Activity

improvement

Browse source
This commit is contained in:
Patrick Schleizer 2022-06-29 16:23:12 -04:00
parent aae4fdcffd
commit 1ce7b27297
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
1 changed files with 11 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

13
usr/lib/dracut/modules.d/40cold-boot-attack-defense/wipe-ram.sh
View file

@ -12,6 +12,7 @@ ram_wipe() {
local OLD_DRACUT_QUIET local OLD_DRACUT_QUIET
OLD_DRACUT_QUIET="$DRACUT_QUIET" OLD_DRACUT_QUIET="$DRACUT_QUIET"
## check_quiet should show info in console.
DRACUT_QUIET='no' DRACUT_QUIET='no'
info "$0: Checking if there are still mounted encrypted disks..." info "$0: Checking if there are still mounted encrypted disks..."
@ -35,15 +36,23 @@ dmsetup_actual_output: '$dmsetup_actual_output'"
info "$0: Starting RAM wipe..." info "$0: Starting RAM wipe..."
## - If DRACUT_QUIET previously was set to '', reset to '' for auto detection by check_quiet.
## - If DRACUT_QUIET previously was set to 'no', reset to 'no' for verbose output.
## - If DRACUT_QUIET previously was set to 'yes', reset to 'yes' to hide sdmem output,
## as well as the oom killing at the end.
DRACUT_QUIET="$OLD_DRACUT_QUIET"
## TODO: sdmem settings. One pass only. Secure? Configurable? ## TODO: sdmem settings. One pass only. Secure? Configurable?
sdmem -l -l -f sdmem -l -l -f
## Reset to DRACUT_QUIET='no' so info messages can be shown.
DRACUT_QUIET='no'
info "$0: RAM wipe completed, OK." info "$0: RAM wipe completed, OK."
info "$0: END: COLD BOOT ATTACK DEFENSE - RAM WIPE ON SHUTDOWN"
## Restore to previous value. ## Restore to previous value.
DRACUT_QUIET="$OLD_DRACUT_QUIET" DRACUT_QUIET="$OLD_DRACUT_QUIET"
info "$0: END: COLD BOOT ATTACK DEFENSE - RAM WIPE ON SHUTDOWN"
sleep 3 sleep 3
} }