On 08/09/2017 11:59 AM, Kirill A. Shutemov wrote:> It's not obvious to me what would break if kernel would ignore> MADV_DONTFORK or MADV_DONTDUMP.Ignoring MADV_DONTDUMP could cause secrets to be written to disk,contrary to the expected security policy of the system.Thanks,Florian