Could you tell me if FreeBSD supports memory page nulling when
releasing it to prevent unauthorized access to data left in the page
after it's allocated again.
Processes always get zeroed pages from the kernel. This is the case
for all Unices, and has been for decades.
DES
--
Dag-Erling Smørgrav - des@xxxxxx
_______________________________________________
freebsd-security@xxxxxxxxxxx mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@xxxxxxxxxxx"
Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3 ... but the signature isn't part of the kernel, and the code that checks the signature is completely independant. ... if your argument was true then Oracle releasing a database appliance would require Oracle to give you the source to their database since it's part of 'bringing about a certain result' namely operating as a database server. ... if your argument was true then releasing a GPL package for windows would require that the windows kernel source be released, after it it's nessasary for 'brining about a certain result' namely letting your code run. ... (Linux-Kernel)
Re: Releasing with a known broken kernel ... The nice thing about kernel upgrades, is that if your new one doesn't work, ... As far as security holes go, ... >> Since I have no idea how big a percentage of the Ubuntu user base has ... > reputation will ubuntu get if word gets around it's releasing with KNOWN ... (Ubuntu)
Re: memory pages nulling when releasing ...Nick Borisov wrote: ...releasing it to prevent unauthorized access to data left in the page ... You can set some malloctunables to control some of this, although if you are trying to do secure programming of sensitive data, look towards mlockto keep the data resident and unpageable to keep it out of the VM system and potentially the swapfile. ... (FreeBSD-Security)
Re: Releasing with a known broken kernel ... Because it's an obscure unlikely to be a problem security hole... Since I have no idea how big a percentage of the Ubuntu user base has ... I'm glad it was released with a patched kernel even if it doesn't work. ... reputation will ubuntu get if word gets around it's releasing with KNOWN ... (Ubuntu)
