Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-11-24 14:23:22 -05:00
Code Issues Projects Releases Packages Wiki Activity
security-misc/usr/lib/dracut/modules.d/40sdmem-security-misc
History
Patrick Schleizer 38cdf2722b
- Wipe LUKS Disk Encryption Key for Root Disk from RAM during Shutdown to defeat Cold Boot Attacks 
- Confirm in console output if encrypted mounts (root disk) is unmounted. (Because that is a pre-condition for wiping the LUKS full disk encryption key from RAM.)

Thanks to @friedy10!

https://github.com/friedy10/dracut/tree/master/modules.d/40sdmem

https://forums.whonix.org/t/is-ram-wipe-possible-inside-whonix-cold-boot-attack-defense/5596
2022-06-29 09:32:55 -04:00
..
module-setup.sh - Wipe LUKS Disk Encryption Key for Root Disk from RAM during Shutdown to defeat Cold Boot Attacks 2022-06-29 09:32:55 -04:00
README.md - Wipe LUKS Disk Encryption Key for Root Disk from RAM during Shutdown to defeat Cold Boot Attacks 2022-06-29 09:32:55 -04:00
wipe.sh - Wipe LUKS Disk Encryption Key for Root Disk from RAM during Shutdown to defeat Cold Boot Attacks 2022-06-29 09:32:55 -04:00

README.md

Make sure sdmem is part of the initramfs

sudo apt-get install secure-delete

sudo dracut --include /usr/bin/sdmem /bin/sdmem --force