Re: [Qemu-devel] [RFC] sanitize memory on system reset

[Stefan Hajnoczi]

On Thu, Jun 13, 2013 at 08:09:09AM +0200, Peter Lieven wrote:
> I was thinking if it would be a good idea to zeroize all memory resources on 
> system reset and
> madvise dontneed them afterwards. This would avoid system reset attacks in 
> case the attacker
> has only access to the console of a vServer but not on the physical host and 
> it would shrink
> RSS size of the vServer siginificantly.

I wonder if you'll hit weird OS installers or PXE clients that rely on
stashing stuff in memory across reset.

Stefan