Re: The disappearing sys_call_table export.

Chuck Ebbert
2003-05-13T01:49:47Z

Yoav Weiss wrote:

>> "That can be done manually" does not get you the check mark in
>> the list of features. Management wants idiot-resistant security.
>
> It has nothing to do with idiot-resistance. Why should this multi-write
> operation be done in kernel ? mkswap is a usermode program. mkfs is a
> usermode program. If you want to have a wipeswap script that copies a
> chunk of your /dev/zero to the swap, it should also be in usermode. Just
> run it in wherever rc file you use to swapoff.

And when I type 'swapoff' at the command line the whole scheme fails
unless I am a perfect robot sysadmin and always remember to wipe the
file. This needs to 'fail safe' and it needs to be done within the kernel
to be considered a working feature.