Messages in this thread | | | Date | Wed, 18 Mar 2015 13:41:36 -0400 | From | Theodore Ts'o <> | Subject | Re: [BUG/PATCH] kernel RNG and its secrets |
| |
Maybe we should add a kernel self-test that automatically checks whether or not memset_explicit() gets optimized away? Otherwise we might not notice when gcc or how we implement barrier() or whatever else we end up using ends up changing.
It shold be something that is really fast, so it might be a good idea to simply automatically run it as part of an __initcall() unconditionally. We can debate where the __initcall() lives, but I'd prefer that it be run even if the crypto layer isn't configured for some reason. Hopefully such an self-test is small enough that the kernel bloat people won't complain. :-)
-Ted
| |