[libvirt PATCH 0/3] Actually do secure erase with explicit_bzero

Ján Tomko jtomko at redhat.com
Mon Dec 12 11:47:20 UTC 2022


On a Monday in 2022, Daniel P. Berrangé wrote:
>If we're going to have a virSecureErase function, we
>might as well make it do secure erasure with currently
>available explicit_bzero in FreeBSD/Linux.
>
>While we're here, we should use it from the RPC code.
>
>The remaining hole in the RPC code is xdr_free which
>does not securely erase buffers. That's not easily
>fixed without dropping the RPC impl in favour of a
>custom one.
>
>Daniel P. Berrangé (3):
>  util: implement secure erase with explicit_bzero
>  rpc: fix buffer offset updates after decoding payload
>  rpc: securely erase the message buffers
>

Reviewed-by: Ján Tomko <jtomko at redhat.com>

Jano
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20221212/2b246a95/attachment.sig>


More information about the libvir-list mailing list