DMARC-Filter: OpenDMARC Filter v1.3.2 mx1.redhat.com D27C78B95B
Subject: Re: [PATCH v2 0/2] mm,fork,security: introduce MADV_WIPEONFORK
To: "Kirill A. Shutemov" <kirill@shutemov.name>,
        Rik van Riel <riel@redhat.com>
Cc: Michal Hocko <mhocko@kernel.org>, linux-kernel@vger.kernel.org,
        mike.kravetz@oracle.com, linux-mm@kvack.org, colm@allcosts.net,
        akpm@linux-foundation.org, keescook@chromium.org, luto@amacapital.net,
        wad@chromium.org, mingo@kernel.org, dave.hansen@intel.com,
        linux-api@vger.kernel.org
References: <20170806140425.20937-1-riel@redhat.com>
 <20170807132257.GH32434@dhcp22.suse.cz>
 <20170807134648.GI32434@dhcp22.suse.cz> <1502117991.6577.13.camel@redhat.com>
 <20170809095957.kv47or2w4obaipkn@node.shutemov.name>
From: Florian Weimer <fweimer@redhat.com>
Message-ID: <8fe8040c-7595-ec09-6ce7-0da4fadc82c4@redhat.com>
Date: Wed, 9 Aug 2017 14:42:51 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
 Thunderbird/52.2.1
MIME-Version: 1.0
In-Reply-To: <20170809095957.kv47or2w4obaipkn@node.shutemov.name>
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 289
Lines: 9

On 08/09/2017 11:59 AM, Kirill A. Shutemov wrote:
> It's not obvious to me what would break if kernel would ignore
> MADV_DONTFORK or MADV_DONTDUMP.

Ignoring MADV_DONTDUMP could cause secrets to be written to disk,
contrary to the expected security policy of the system.

Thanks,
Florian