master ← zarhus:master
opened 08:57AM - 21 Aug 25 UTC
As per testing kernel memory zeroing with `init_on_free=1`, remove all the refer…ences to `sdmem` and the second RAM wipe pass. See https://www.kicksecure.com/wiki/Dev/RAM_Wipe#ram-wipe_improvements for more information.
An analysis of the `init_on_free` mechanism in the context of ram-wipe has been described [here](https://beta.blog.3mdeb.com/2025/2025-08-12-ram-wipe-further-analysis/).
The mechanism [might use some future improvements](https://beta.blog.3mdeb.com/2025/2025-08-12-ram-wipe-further-analysis/#summary) for people with high operational security requirements, when wiping the LUKS secret key is not enough - perhaps as part of improving this draft PR. While it has `sdmem` and the second RAM wipe pass removed, it can be reworked further to clean up more related, unnecessary code.
## Changes
References to sdmem and kexec have been removed. Mentions of second stage have been rewritten to mention the only one stage.
## Mandatory Checklist
- [x] Legal agreements accepted. By contributing to this organisation, you acknowledge you have read, understood, and agree to be bound by these these agreements:
[Terms of Service](https://www.kicksecure.com/wiki/Terms_of_Service), [Privacy Policy](https://www.kicksecure.com/wiki/Privacy_Policy), [Cookie Policy](https://www.kicksecure.com/wiki/Cookie_Policy), [E-Sign Consent](https://www.kicksecure.com/wiki/E-Sign_Consent), [DMCA](https://www.kicksecure.com/wiki/DMCA), [Imprint](https://www.kicksecure.com/wiki/Imprint)
## Optional Checklist
The following items are optional but might be requested in certain cases.
- [x] I have tested it locally
- [ ] I have reviewed and updated any documentation if relevant
- [ ] I am providing new code and test(s) for it