5 Commits

Author	SHA1	Message	Date
Patrick Schleizer	8a072437cc	ram wipe on shutdown: fix, added need_shutdown hook ... Otherwise dracut does not run on shutdown. Without `need_shutdown` file `/run/initramfs/.need_shutdown` does not get created. And without that file `/usr/lib/dracut/dracut-initramfs-restore`, which itself is started by `/lib/systemd/system/dracut-shutdown.service` does nothing.	2022-06-29 14:13:30 -04:00
Patrick Schleizer	295811a88f	improvements	2022-06-29 11:14:52 -04:00
Patrick Schleizer	024d52a67e	improve usr/lib/dracut/modules.d/40sdmem-security-misc/module-setup.sh	2022-06-29 09:52:53 -04:00
Patrick Schleizer	29253004b6	minor	2022-06-29 09:38:18 -04:00
Patrick Schleizer	38cdf2722b	- Wipe LUKS Disk Encryption Key for Root Disk from RAM during Shutdown to defeat Cold Boot Attacks ... - Confirm in console output if encrypted mounts (root disk) is unmounted. (Because that is a pre-condition for wiping the LUKS full disk encryption key from RAM.) Thanks to @friedy10! https://github.com/friedy10/dracut/tree/master/modules.d/40sdmem https://forums.whonix.org/t/is-ram-wipe-possible-inside-whonix-cold-boot-attack-defense/5596	2022-06-29 09:32:55 -04:00