Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-15 00:59:16 -04:00
Code Issues Projects Releases Packages Wiki Activity

sync

Browse source
This commit is contained in:
Patrick Schleizer 2022-07-02 19:07:06 -04:00
parent 01b82bf0f0
commit 67bdd58bf2
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
usr/lib/dracut/modules.d/40cold-boot-attack-defense/wipe-ram.sh
View file

@ -29,10 +29,14 @@ ram_wipe() {
echo "INFO: wipe-ram.sh: Cold boot attack defense... Starting RAM wipe on shutdown..." > /dev/kmsg echo "INFO: wipe-ram.sh: Cold boot attack defense... Starting RAM wipe on shutdown..." > /dev/kmsg
sync
## https://gitlab.tails.boum.org/tails/tails/-/blob/master/config/chroot_local-includes/usr/local/lib/initramfs-pre-shutdown-hook ## https://gitlab.tails.boum.org/tails/tails/-/blob/master/config/chroot_local-includes/usr/local/lib/initramfs-pre-shutdown-hook
### Ensure any remaining disk cache is erased by Linux' memory poisoning ### Ensure any remaining disk cache is erased by Linux' memory poisoning
echo 3 > /proc/sys/vm/drop_caches echo 3 > /proc/sys/vm/drop_caches
sync
## TODO: sdmem settings. One pass only. Secure? Configurable? ## TODO: sdmem settings. One pass only. Secure? Configurable?
## TODO: > /dev/kmsg 2> /dev/kmsg ## TODO: > /dev/kmsg 2> /dev/kmsg
sdmem -l -l -v sdmem -l -l -v