Re: [PATCH] zero disk pages used by swsusp on resume

Pavel Machek
2005-04-11T10:15:09Z

Hi!

> > Encrypting swsusp image is of course even better, because you don't
> > have to write large ammounts of zeros to your disks during resume ;-).
>
> How does zeroing help if they steal the laptop? The data is there, they
> can just pull the hard disk out and mirror it before they boot.
>
> The only way to improve security here is to encrypt it. Zeroing will
> help some if they compromise root later, but I doubt that's really worth
> it considering you're screwed after a root compromise anyway.

Yes, it helps. It also helps if they steal your laptop later. And we
are switching to encryption, anyway, because it should be faster.
Pavel
--
Boycott Kodak -- for their patent abuse against Java.