David Kahn wrote:
>
> The other question I have (but I'm admittedly out of my
> area of expertise here) is:
>
> zfod pages will still be zero filled, I assume.
>
> And can I assume that there will be no way for
> old data laying around in memory from the old instance
> of the OS to be mapped and read by the new instance of
> the OS (specifically, applications), since we aren't
> clearing memory before the restart?
>
> Are we meeting security requirements in this area?

This goes the question/concern I raised.  If the new OS is assumed to be 
"friendly", then yes, user pages are cleared properly.  The only risk 
comes if a "hostile" kernel is rebooted.

    - Garrett


Reply via email to