On Mon, Apr 6, 2020 at 10:12 AM Joe Perches <joe@xxxxxxxxxxx> wrote: > > Add yet another alloc flag like __GFP_SENSITIVE > and have kfree operate on that and not have a > kfree_sensitive at all. That sounds potentially sensible. Maybe even a SLAB_SENSITIVE to mark a whole slab cache sensitive for kmem_cache_create(). I'm not sure how controlled the allocations are, though. The allocations that get used for keys etc might come from outside the crypto layer. Linus