On Thu, Apr 25, 2019 at 5:37 AM Michal Hocko <mhocko@xxxxxxxxxx> wrote: > Besides that you inherently assume that the user would do mlock because > you do not try to wipe the swap content. Is this intentional? Yes, given MADV_DONTDUMP doesn't imply mlock I thought it'd be more consistent to keep those independent. > Another question would be regarding the targeted user API. There are > some attempts to make all the freed memory to be zeroed/poisoned. Are > users who would like to use this feature also be interested in using > system wide setting as well? I think that depends on the performance overhead of a global setting, but it's also influenced by the semantics around when the freeing occurs, which is something I haven't nailed down yet. If the expectation is that the page is freed whenever the process exits, even if the page is in use somewhere else, then we'd still want this to be separate to poisoning on final page free.