mirror of
https://github.com/Kicksecure/security-misc.git
synced 2025-03-02 11:09:17 -05:00
38cdf2722b
- Confirm in console output if encrypted mounts (root disk) is unmounted. (Because that is a pre-condition for wiping the LUKS full disk encryption key from RAM.) Thanks to @friedy10! https://github.com/friedy10/dracut/tree/master/modules.d/40sdmem https://forums.whonix.org/t/is-ram-wipe-possible-inside-whonix-cold-boot-attack-defense/5596
Make sure sdmem is part of the initramfs
sudo apt-get install secure-delete
sudo dracut --include /usr/bin/sdmem /bin/sdmem --force