> > Also, there's no discussion about long-lived threads keeping > > sensitive information in there kernel stack indefinitely. > > kernel stack clearing isn't hard to do, just do it on every syscall exit > and in the infinite loop for kernel threads. Actually that is probably not as important. In most cases you would be leaking data between syscalls made by the same thread. -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html