Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-14 20:17:09 -05:00
Code Issues Packages Projects Releases Wiki Activity

output

Browse Source
This commit is contained in:
Patrick Schleizer 2022-06-29 16:24:52 -04:00
parent d4161b2748
commit 92c543e71f
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
usr/lib/dracut/modules.d/40cold-boot-attack-defense/wipe-ram.sh
View File

@ -13,18 +13,18 @@ ram_wipe() {
## check_quiet should show info in console. ## check_quiet should show info in console.
DRACUT_QUIET='no' DRACUT_QUIET='no'
info "$0: START: COLD BOOT ATTACK DEFENSE - RAM WIPE ON SHUTDOWN" info "wipe-ram.sh: START: COLD BOOT ATTACK DEFENSE - RAM WIPE ON SHUTDOWN"
info "$0: Checking if there are still mounted encrypted disks..." info "wipe-ram.sh: Checking if there are still mounted encrypted disks..."
local dmsetup_actual_output dmsetup_expected_output local dmsetup_actual_output dmsetup_expected_output
dmsetup_actual_output="$(dmsetup ls --target crypt)" dmsetup_actual_output="$(dmsetup ls --target crypt)"
dmsetup_expected_output="No devices found" dmsetup_expected_output="No devices found"
if [ "$dmsetup_actual_output" = "$dmsetup_expected_output" ]; then if [ "$dmsetup_actual_output" = "$dmsetup_expected_output" ]; then
info "$0: Success, there are no more mounted encrypted disks, OK." info "wipe-ram.sh: Success, there are no more mounted encrypted disks, OK."
else else
warn "\ warn "\
$0: There are still mounted encrypted disks! RAM wipe failed! wipe-ram.sh: There are still mounted encrypted disks! RAM wipe failed!
debugging information: debugging information:
dmsetup_expected_output: '$dmsetup_expected_output' dmsetup_expected_output: '$dmsetup_expected_output'
@ -33,7 +33,7 @@ dmsetup_actual_output: '$dmsetup_actual_output'"
return 0 return 0
fi fi
info "$0: Starting RAM wipe..." info "wipe-ram.sh: Starting RAM wipe..."
## - If DRACUT_QUIET previously was set to '', reset to '' for auto detection by check_quiet. ## - If DRACUT_QUIET previously was set to '', reset to '' for auto detection by check_quiet.
## - If DRACUT_QUIET previously was set to 'no', reset to 'no' for verbose output. ## - If DRACUT_QUIET previously was set to 'no', reset to 'no' for verbose output.
@ -47,8 +47,8 @@ dmsetup_actual_output: '$dmsetup_actual_output'"
## Reset to DRACUT_QUIET='no' so info messages can be shown. ## Reset to DRACUT_QUIET='no' so info messages can be shown.
DRACUT_QUIET='no' DRACUT_QUIET='no'
info "$0: RAM wipe completed, OK." info "wipe-ram.sh: RAM wipe completed, OK."
info "$0: END: COLD BOOT ATTACK DEFENSE - RAM WIPE ON SHUTDOWN" info "wipe-ram.sh: END: COLD BOOT ATTACK DEFENSE - RAM WIPE ON SHUTDOWN"
## Restore to previous value. ## Restore to previous value.
DRACUT_QUIET="$OLD_DRACUT_QUIET" DRACUT_QUIET="$OLD_DRACUT_QUIET"