Re: [Qemu-devel] [RFC] sanitize memory on system reset

[Stefan Hajnoczi]

On Thu, Jun 13, 2013 at 10:46:39AM +0200, Peter Lieven wrote:
> On 13.06.2013 10:40, Stefan Hajnoczi wrote:
> >On Thu, Jun 13, 2013 at 08:09:09AM +0200, Peter Lieven wrote:
> >>I was thinking if it would be a good idea to zeroize all memory resources 
> >>on system reset and
> >>madvise dontneed them afterwards. This would avoid system reset attacks in 
> >>case the attacker
> >>has only access to the console of a vServer but not on the physical host 
> >>and it would shrink
> >>RSS size of the vServer siginificantly.
> >I wonder if you'll hit weird OS installers or PXE clients that rely on
> >stashing stuff in memory across reset.
> Mhh, that indeed would be weird.
> 
> What do you think of the idea in general? You concerns could be addresses by 
> adding
> a switch for this which defaults to off.

Any time we deviate from how real hardware behaves we end up in trouble
later on.  Something will depend on this behavior.

It is nice to reduce the RSS footprint on reboot in some cases, your
idea makes sense.  I think it should be disabled by default for
compatibility.

Stefan